@elytracms/studio 0.0.43 → 0.0.45

package/convex/cms.ts

@@ -1,4 +1,6 @@
 import { v } from 'convex/values'
+import { foldDocument, unfoldDocument } from '@elytracms/core/cms-core'
+import type { CmsDocument } from '@elytracms/core/cms-core'
 import { mutation, query } from './functions'
 import { requireCapability } from './guard'
 
@@ -9,8 +11,29 @@ import { requireCapability } from './guard'
  * table and no schema read/write function here. Collection-membership
  * validation lives in `@elytracms/core/cms-core` `validateDocument` (the studio runs it
  * pre-dispatch); this layer is a pure document store.
+ *
+ * ## EC-260 depth-budget codec (the storage boundary)
+ *
+ * Convex caps STORED documents at 16 nesting levels but allows 64 in function
+ * args/returns. Ordinary content (deep rich text, nested compositions) trips 16 at
+ * rest, so every write here FOLDS over-budget field values into self-describing
+ * leaf envelopes immediately before `ctx.db`, and every read UNFOLDS before the
+ * value leaves the function. Mutations receive the UNFOLDED value over the wire, so
+ * the AD-15 reference walker (in the write-chokepoint trigger, which unfolds first)
+ * always sees structured content. The wire never carries an envelope; only raw
+ * `ctx.db` reads / the dashboard see the folded storage form.
  */
 
+/** Unfold the `document` blob of a stored row before it leaves the function. */
+function withUnfoldedDocument<R extends { document: unknown }>(row: R): R {
+  return { ...row, document: unfoldDocument(row.document as CmsDocument) }
+}
+
+/** Unfold the `snapshot` blob of a version row before it leaves the function. */
+function withUnfoldedSnapshot<R extends { snapshot: unknown }>(row: R): R {
+  return { ...row, snapshot: unfoldDocument(row.snapshot as CmsDocument) }
+}
+
 export const upsertDocument = mutation({
   args: {
     collection: v.string(),
@@ -21,6 +44,10 @@ export const upsertDocument = mutation({
   },
   handler: async (ctx, args) => {
     await requireCapability(ctx, 'content.write') // EC-150
+    // EC-260: fold for storage. `args.document` arrives UNFOLDED over the 64-level
+    // arg wire; the trigger unfolds before extracting references, so folding here
+    // (strictly before the `ctx.db` write) never hides a reference from the walker.
+    const stored = { ...args, document: foldDocument(args.document as CmsDocument) }
     const existing = await ctx.db
       .query('cmsDocuments')
       .withIndex('by_doc', (q) => q.eq('collection', args.collection).eq('docId', args.docId))
@@ -28,17 +55,19 @@ export const upsertDocument = mutation({
     if (existing) {
       // EC-153 parity: updates preserve `createdAt`, exactly like in-memory.
       // EC-286: the write-chokepoint trigger reindexes references in-transaction.
-      const patch = { ...args, createdAt: existing.createdAt }
+      const patch = { ...stored, createdAt: existing.createdAt }
       await ctx.db.patch(existing._id, patch)
       // EC-322: return the merged row directly instead of re-reading the full
       // (up-to-~20 KB) document body via `ctx.db.get`. `patch` only overwrites the
       // supplied fields, so `{ ...existing, ...patch }` is byte-identical to the
       // stored row (system fields + untouched `publishedVersion` carried from
       // `existing`) — cutting one full-document read off the hottest write path.
-      return { ...existing, ...patch }
+      // EC-260: unfold the folded body back to structured form for the return.
+      return withUnfoldedDocument({ ...existing, ...patch })
     }
-    const id = await ctx.db.insert('cmsDocuments', args)
-    return ctx.db.get(id)
+    const id = await ctx.db.insert('cmsDocuments', stored)
+    const row = await ctx.db.get(id)
+    return row ? withUnfoldedDocument(row) : row
   },
 })
 
@@ -46,10 +75,11 @@ export const getDocument = query({
   args: { collection: v.string(), docId: v.string() },
   handler: async (ctx, args) => {
     await requireCapability(ctx, 'content.read') // EC-150
-    return ctx.db
+    const row = await ctx.db
       .query('cmsDocuments')
       .withIndex('by_doc', (q) => q.eq('collection', args.collection).eq('docId', args.docId))
       .first()
+    return row ? withUnfoldedDocument(row) : row // EC-260: unfold before returning
   },
 })
 
@@ -57,14 +87,13 @@ export const listDocuments = query({
   args: { collection: v.optional(v.string()) },
   handler: async (ctx, args) => {
     await requireCapability(ctx, 'content.read') // EC-150
-    if (args.collection) {
-      const collection = args.collection
-      return ctx.db
-        .query('cmsDocuments')
-        .withIndex('by_collection', (q) => q.eq('collection', collection))
-        .collect()
-    }
-    return ctx.db.query('cmsDocuments').collect()
+    const rows = args.collection
+      ? await ctx.db
+          .query('cmsDocuments')
+          .withIndex('by_collection', (q) => q.eq('collection', args.collection as string))
+          .collect()
+      : await ctx.db.query('cmsDocuments').collect()
+    return rows.map(withUnfoldedDocument) // EC-260: unfold before returning
   },
 })
 
@@ -113,8 +142,12 @@ export const saveDocumentVersion = mutation({
       .order('desc')
       .first()
     const version = (latest?.version ?? 0) + 1
-    const id = await ctx.db.insert('documentVersions', { ...args, version })
-    return ctx.db.get(id)
+    // EC-260: the snapshot embeds the CmsDocument at draft depth, so it folds at rest
+    // identically. `documentVersions` has no trigger — no walker to keep structured.
+    const stored = { ...args, snapshot: foldDocument(args.snapshot as CmsDocument), version }
+    const id = await ctx.db.insert('documentVersions', stored)
+    const row = await ctx.db.get(id)
+    return row ? withUnfoldedSnapshot(row) : row
   },
 })
 
@@ -127,7 +160,7 @@ export const listDocumentVersions = query({
       .withIndex('by_doc', (q) => q.eq('collection', args.collection).eq('docId', args.docId))
       .collect()
     // Newest first (parity with the in-memory `listDocumentVersions`).
-    return rows.sort((a, b) => b.version - a.version)
+    return rows.sort((a, b) => b.version - a.version).map(withUnfoldedSnapshot) // EC-260
   },
 })
 
@@ -138,12 +171,13 @@ export const getDocumentVersion = query({
     // EC-307: address the row directly via `by_doc_version` instead of collecting
     // the whole — unbounded — per-document history and finding in JS. `version` is
     // unique per (collection, docId), so `.unique()` both fetches and asserts that.
-    return ctx.db
+    const row = await ctx.db
       .query('documentVersions')
       .withIndex('by_doc_version', (q) =>
         q.eq('collection', args.collection).eq('docId', args.docId).eq('version', args.version),
       )
       .unique()
+    return row ? withUnfoldedSnapshot(row) : row // EC-260: unfold before returning
   },
 })
 
@@ -175,7 +209,8 @@ export const listPublishedDocuments = query({
           q.eq('collection', doc.collection).eq('docId', doc.docId).eq('version', version),
         )
         .unique()
-      if (pinned) snapshots.push(pinned.snapshot)
+      // EC-260: unfold the pinned snapshot before it leaves the function.
+      if (pinned) snapshots.push(unfoldDocument(pinned.snapshot as CmsDocument))
     }
     return snapshots
   },
@@ -186,7 +221,8 @@ export const listAllDocumentVersions = query({
   args: {},
   handler: async (ctx) => {
     await requireCapability(ctx, 'content.read') // EC-150
-    return ctx.db.query('documentVersions').collect()
+    const rows = await ctx.db.query('documentVersions').collect()
+    return rows.map(withUnfoldedSnapshot) // EC-260: unfold before returning
   },
 })
 
@@ -208,7 +244,8 @@ export const publishDocumentVersion = mutation({
     // write-chokepoint trigger sees — it reindexes the published reference rows
     // and fires host revalidation (EC-146 instant publish). No manual calls here.
     await ctx.db.patch(doc._id, { publishedVersion: args.version, updatedAt: args.updatedAt })
-    return ctx.db.get(doc._id)
+    const row = await ctx.db.get(doc._id)
+    return row ? withUnfoldedDocument(row) : row // EC-260: unfold before returning
   },
 })
 
@@ -225,6 +262,7 @@ export const unpublishDocument = mutation({
     // EC-286: clearing the pin is a change the write-chokepoint trigger sees — it
     // drops the published index rows and revalidates the host. No manual calls.
     await ctx.db.patch(doc._id, { publishedVersion: undefined, updatedAt: args.updatedAt })
-    return ctx.db.get(doc._id)
+    const row = await ctx.db.get(doc._id)
+    return row ? withUnfoldedDocument(row) : row // EC-260: unfold before returning
   },
 })

package/convex/content.ts

@@ -1,4 +1,4 @@
-import { documentKey, documentSchema } from '@elytracms/core/cms-core'
+import { documentKey, documentSchema, unfoldValue } from '@elytracms/core/cms-core'
 import type {
   CmsDocument,
   CmsValidationIssue,
@@ -157,7 +157,9 @@ export async function createContent(
   // a published read can serve the *pinned* version rather than the live draft.
   const versionsByKey = new Map<string, Map<number, CmsDocument>>()
   for (const row of await ctx.db.query('documentVersions').collect()) {
-    const parsed = documentSchema.safeParse(row.snapshot)
+    // EC-260: unfold the folded storage form before parsing — the kit resolves over
+    // STRUCTURED values, exactly like the Next-side snapshot (byte-equivalence).
+    const parsed = documentSchema.safeParse(unfoldValue(row.snapshot))
     if (!parsed.success) continue
     const key = `${row.collection}:${row.docId}`
     let byVersion = versionsByKey.get(key)
@@ -176,7 +178,8 @@ export async function createContent(
   // resolves exactly as before.
   const parsedSources: { key: string; source: ContentDocumentSource }[] = []
   for (const row of documentRows) {
-    const parsed = documentSchema.safeParse(row.document)
+    // EC-260: unfold the folded storage form before parsing (see the versions loop).
+    const parsed = documentSchema.safeParse(unfoldValue(row.document))
     if (!parsed.success) {
       loadIssues.push({
         code: 'invalid-stored-document',

package/convex/delivery.ts

@@ -1,4 +1,5 @@
 import { v } from 'convex/values'
+import { unfoldValue } from '@elytracms/core/cms-core'
 import { dataSourceSchema } from '@elytracms/core/data-binding'
 import { query } from './functions'
 import type { QueryCtx } from './functions'
@@ -134,6 +135,10 @@ export async function loadSnapshot(
   const { projectId } = args
 
   const documentRows = await ctx.db.query('cmsDocuments').collect()
+  // EC-260: the stored `document`/`snapshot` blobs are folded; unfold every one
+  // before it enters the delivery snapshot so the host receives STRUCTURED content
+  // (no client ever sees an envelope). `unfoldValue` is identity on legacy data.
+  const unfoldDraft = (row: { document: unknown }): unknown => unfoldValue(row.document)
   // THE published-content invariant (the trust boundary): the public snapshot
   // ships ONLY published content — never a draft. Under the EC-224 pointer model
   // a published row is served as its *pinned version snapshot* (decoupled from
@@ -142,7 +147,7 @@ export async function loadSnapshot(
   // fallback (the `state` field is gone).
   let documents: unknown[]
   if (perspective === 'draft') {
-    documents = documentRows.map((row) => row.document as unknown)
+    documents = documentRows.map(unfoldDraft)
   } else {
     documents = []
     for (const row of documentRows) {
@@ -160,7 +165,7 @@ export async function loadSnapshot(
           q.eq('collection', row.collection).eq('docId', row.docId).eq('version', version),
         )
         .unique()
-      if (pinned) documents.push(pinned.snapshot as unknown)
+      if (pinned) documents.push(unfoldValue(pinned.snapshot))
     }
   }
 
@@ -202,9 +207,7 @@ export async function loadSnapshot(
   // extracted from every stored row (independent of publish state) — published
   // bindings must always resolve their definitions, even when the defining
   // `cms-data-sources` row is not itself "published".
-  const sources = dataSourcesFromSystemCollection(
-    documentRows.map((row) => row.document as unknown),
-  )
+  const sources = dataSourcesFromSystemCollection(documentRows.map(unfoldDraft))
 
   // Editorial redirects (EC-303): only ENABLED entries serve — a disabled redirect
   // is stored but never live, in either perspective. Projected to the routing

package/convex/triggers.ts

@@ -1,3 +1,4 @@
+import { unfoldDocument } from '@elytracms/core/cms-core'
 import type { CmsDocument } from '@elytracms/core/cms-core'
 import { Triggers } from 'convex-helpers/server/triggers'
 import type { DataModel } from './functions'
@@ -42,11 +43,17 @@ triggers.register('cmsDocuments', async (ctx, change) => {
     return
   }
   const doc = change.newDoc
+  // EC-260: the stored `document` is FOLDED (deep field values collapsed to leaf
+  // envelopes). Unfold it here so `extractReferences` walks the STRUCTURED value and
+  // still finds references buried inside a folded field — this is the write chokepoint
+  // (EC-286), so every writer's references are derived from structured content by
+  // construction, regardless of the folded storage form. `unfoldDocument` is identity
+  // on already-structural data, so a legacy unfolded row costs nothing.
   await maintainDocumentReferences(
     ctx,
     doc.collection,
     doc.docId,
-    doc.document as CmsDocument,
+    unfoldDocument(doc.document as CmsDocument),
     doc.publishedVersion !== undefined,
   )
   const before = change.oldDoc?.publishedVersion

package/dist/components/app-views/studio-config.d.ts

@@ -1,6 +1,7 @@
 import type { ReactNode } from 'react';
 import type { FieldDef } from '@elytracms/core/cms-core';
 import type { StudioI18nConfig } from '@elytracms/studio/lib/i18n';
+import type { StudioAiConfig } from '@elytracms/studio/lib/ai';
 import type { SidebarNode } from './module';
 /**
  * EC-236 — the studio customization config: the single, studio-only home for
@@ -47,6 +48,17 @@ export interface StudioConfig {
      * `LocalizedString` on the field/collection def.
      */
     i18n?: StudioI18nConfig;
+    /**
+     * AI platform (EC-331): provider, project knowledge, and soft limits. The block's
+     * PRESENCE enables the AI feature; its ABSENCE means the feature is fully absent —
+     * no AI UI and no AI dependencies on the critical path (the runtime lives behind a
+     * lazy boundary in `@elytracms/studio/lib/ai`, only reached when configured).
+     * `enabled: false` is a temporary kill-switch. Studio-only live code (holds the
+     * provider adapter + knowledge functions) — never reaches the delivery bundle.
+     * Validated at load by `resolveAiConfig` (capability gate: tool calling + structured
+     * output required, fail-loud).
+     */
+    ai?: StudioAiConfig;
 }
 /** The props a custom field renderer receives — identical to the built-in control. */
 export interface CustomFieldRendererProps {

package/dist/components/app-views/studio-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"studio-config.js","sourceRoot":"","sources":["../../../src/components/app-views/studio-config.ts"],"names":[],"mappings":"AA8DA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,YAAY,CAAC,MAAoB;IAC/C,OAAO,MAAM,CAAA;AACf,CAAC","sourcesContent":["import type { ReactNode } from 'react'\nimport type { FieldDef } from '@elytracms/core/cms-core'\nimport type { StudioI18nConfig } from '@elytracms/studio/lib/i18n'\nimport type { SidebarNode } from './module'\n\n/**\n * EC-236 — the studio customization config: the single, studio-only home for\n * everything a consuming repo customizes about the builder UI.\n *\n * This is the \"separate studio-only config solution\": it lives in the consumer's\n * `studio.config.tsx`, is `defineStudio({...})`-typed, and is passed to\n * `createStudio(config, studioConfig)` at the mount — NEVER mixed into the shared\n * `elytra.config.ts`, so the live React it carries (views, icons, field renderers,\n * future branding) never reaches the `frontend/` delivery bundle.\n *\n * The customization PRINCIPLE it embodies: customization is **code passed\n * directly**, not data referenced by a string key. Every field here holds live\n * values/components by reference — `sidebar` is built from `nav.*` view objects,\n * `fieldRenderers` maps a control name to a component. The only string indirection\n * in the whole surface is `fieldRenderers`' key, and ONLY because its other end\n * (`form.control` on a field) lives in the delivery-shared serializable schema and\n * cannot import studio code. This config grows by adding direct-value keys\n * (branding/logo/panels/theme), never by adding registries.\n */\nexport interface StudioConfig {\n  /**\n   * The section rail (EC-237) as an ordered list of `nav.*` nodes — views, groups,\n   * and separators. Omitted → the studio derives the default rail from its built-in\n   * views. A rail node carries its view object directly; there are no string ids to\n   * keep in sync.\n   */\n  sidebar?: SidebarNode[]\n  /**\n   * Custom field renderers (EC-238) keyed by CONTROL name (`form.control`), each a\n   * React component replacing the built-in document-editor control. A field opts in\n   * per-field via `form: { control: '<name>' }` — so a renderer targets exactly the\n   * fields that ask for it, not every field of a datatype. This is the one\n   * boundary-crossing seam: the field names its control by string in the shared\n   * schema, this map binds that name to a studio-only component.\n   */\n  fieldRenderers?: Record<string, CustomFieldRenderer>\n  /**\n   * Studio-UI localization (EC-241): the default locale + imported translation\n   * catalogs. English is the built-in source; a consumer adds e.g.\n   * `i18n: { locales: { de: deMessages } }` and the studio chrome renders in the\n   * browser's preferred locale (no persisted selector in v1). Studio-only — never\n   * reaches the delivery bundle. Schema labels localize separately, via a\n   * `LocalizedString` on the field/collection def.\n   */\n  i18n?: StudioI18nConfig\n}\n\n/** The props a custom field renderer receives — identical to the built-in control. */\nexport interface CustomFieldRendererProps {\n  field: FieldDef\n  value: unknown\n  onChange: (value: unknown) => void\n  readOnly: boolean\n  id: string\n}\nexport type CustomFieldRenderer = (props: CustomFieldRendererProps) => ReactNode\n\n/**\n * Typed identity helper for `studio.config.tsx` — keeps the config declarative\n * (like {@link import('@elytracms/core/studio-core').defineElytraConfig}). No\n * validation here; the studio resolves + validates the sidebar and field renderers\n * through the EC-236 seam at mount, surfacing every issue visibly (never throws).\n *\n * @example\n * ```tsx\n * // studio.config.tsx\n * import { defineStudio, nav } from '@elytracms/studio/customization'\n * import { ColorField } from './fields/color'\n *\n * export default defineStudio({\n *   sidebar: [\n *     nav.cms({ label: 'Content' }),\n *     nav.group('Catalog', [\n *       nav.cms({ label: 'Catalog', collections: ['product', 'productCategory'] }),\n *       nav.cms({ label: 'Categories', collection: 'productCategory' }),\n *     ]),\n *     nav.separator(),\n *     nav.assets(),\n *     nav.settings(),\n *   ],\n *   fieldRenderers: { color: ColorField },\n * })\n * ```\n */\nexport function defineStudio(config: StudioConfig): StudioConfig {\n  return config\n}\n"]}
+{"version":3,"file":"studio-config.js","sourceRoot":"","sources":["../../../src/components/app-views/studio-config.ts"],"names":[],"mappings":"AA0EA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,YAAY,CAAC,MAAoB;IAC/C,OAAO,MAAM,CAAA;AACf,CAAC","sourcesContent":["import type { ReactNode } from 'react'\nimport type { FieldDef } from '@elytracms/core/cms-core'\nimport type { StudioI18nConfig } from '@elytracms/studio/lib/i18n'\nimport type { StudioAiConfig } from '@elytracms/studio/lib/ai'\nimport type { SidebarNode } from './module'\n\n/**\n * EC-236 — the studio customization config: the single, studio-only home for\n * everything a consuming repo customizes about the builder UI.\n *\n * This is the \"separate studio-only config solution\": it lives in the consumer's\n * `studio.config.tsx`, is `defineStudio({...})`-typed, and is passed to\n * `createStudio(config, studioConfig)` at the mount — NEVER mixed into the shared\n * `elytra.config.ts`, so the live React it carries (views, icons, field renderers,\n * future branding) never reaches the `frontend/` delivery bundle.\n *\n * The customization PRINCIPLE it embodies: customization is **code passed\n * directly**, not data referenced by a string key. Every field here holds live\n * values/components by reference — `sidebar` is built from `nav.*` view objects,\n * `fieldRenderers` maps a control name to a component. The only string indirection\n * in the whole surface is `fieldRenderers`' key, and ONLY because its other end\n * (`form.control` on a field) lives in the delivery-shared serializable schema and\n * cannot import studio code. This config grows by adding direct-value keys\n * (branding/logo/panels/theme), never by adding registries.\n */\nexport interface StudioConfig {\n  /**\n   * The section rail (EC-237) as an ordered list of `nav.*` nodes — views, groups,\n   * and separators. Omitted → the studio derives the default rail from its built-in\n   * views. A rail node carries its view object directly; there are no string ids to\n   * keep in sync.\n   */\n  sidebar?: SidebarNode[]\n  /**\n   * Custom field renderers (EC-238) keyed by CONTROL name (`form.control`), each a\n   * React component replacing the built-in document-editor control. A field opts in\n   * per-field via `form: { control: '<name>' }` — so a renderer targets exactly the\n   * fields that ask for it, not every field of a datatype. This is the one\n   * boundary-crossing seam: the field names its control by string in the shared\n   * schema, this map binds that name to a studio-only component.\n   */\n  fieldRenderers?: Record<string, CustomFieldRenderer>\n  /**\n   * Studio-UI localization (EC-241): the default locale + imported translation\n   * catalogs. English is the built-in source; a consumer adds e.g.\n   * `i18n: { locales: { de: deMessages } }` and the studio chrome renders in the\n   * browser's preferred locale (no persisted selector in v1). Studio-only — never\n   * reaches the delivery bundle. Schema labels localize separately, via a\n   * `LocalizedString` on the field/collection def.\n   */\n  i18n?: StudioI18nConfig\n  /**\n   * AI platform (EC-331): provider, project knowledge, and soft limits. The block's\n   * PRESENCE enables the AI feature; its ABSENCE means the feature is fully absent —\n   * no AI UI and no AI dependencies on the critical path (the runtime lives behind a\n   * lazy boundary in `@elytracms/studio/lib/ai`, only reached when configured).\n   * `enabled: false` is a temporary kill-switch. Studio-only live code (holds the\n   * provider adapter + knowledge functions) — never reaches the delivery bundle.\n   * Validated at load by `resolveAiConfig` (capability gate: tool calling + structured\n   * output required, fail-loud).\n   */\n  ai?: StudioAiConfig\n}\n\n/** The props a custom field renderer receives — identical to the built-in control. */\nexport interface CustomFieldRendererProps {\n  field: FieldDef\n  value: unknown\n  onChange: (value: unknown) => void\n  readOnly: boolean\n  id: string\n}\nexport type CustomFieldRenderer = (props: CustomFieldRendererProps) => ReactNode\n\n/**\n * Typed identity helper for `studio.config.tsx` — keeps the config declarative\n * (like {@link import('@elytracms/core/studio-core').defineElytraConfig}). No\n * validation here; the studio resolves + validates the sidebar and field renderers\n * through the EC-236 seam at mount, surfacing every issue visibly (never throws).\n *\n * @example\n * ```tsx\n * // studio.config.tsx\n * import { defineStudio, nav } from '@elytracms/studio/customization'\n * import { ColorField } from './fields/color'\n *\n * export default defineStudio({\n *   sidebar: [\n *     nav.cms({ label: 'Content' }),\n *     nav.group('Catalog', [\n *       nav.cms({ label: 'Catalog', collections: ['product', 'productCategory'] }),\n *       nav.cms({ label: 'Categories', collection: 'productCategory' }),\n *     ]),\n *     nav.separator(),\n *     nav.assets(),\n *     nav.settings(),\n *   ],\n *   fieldRenderers: { color: ColorField },\n * })\n * ```\n */\nexport function defineStudio(config: StudioConfig): StudioConfig {\n  return config\n}\n"]}

package/dist/components/assets/assets-collection-view-source.d.ts

@@ -1,6 +1,8 @@
 import type { CmsDocument, CollectionDef } from '@elytracms/core/cms-core';
 import type { AssetRecord } from '@elytracms/core/persistence';
-import type { CollectionViewCapabilities, CollectionViewSource } from '@elytracms/studio/lib/collection-view/collection-view-source';
+import type { OperationError } from '@elytracms/core/operations';
+import type { DeleteAssetResult } from '@elytracms/studio/lib/assets';
+import type { CollectionViewSource, CollectionViewCapabilities } from '@elytracms/studio/lib/collection-view/collection-view-source';
 /**
  * The capability profile of the assets rail (EC-319). Hoisted to a module-level
  * constant (no prop/state dependency) so it's both the value the hook returns
@@ -38,6 +40,12 @@ export declare function assetToDocument(collection: CollectionDef, record: Asset
  * never written here.
  */
 export declare function documentToAssetMetaPatch(collection: CollectionDef, doc: CmsDocument): Record<string, unknown>;
+/** Assets' `remove()` returns an `outcome`-discriminated {@link DeleteAssetResult}
+ *  (not the `{ ok }` shape users/redirects use, EC-327): only `'error'` is a
+ *  failure the shell surfaces via `lastError`. `'blocked'`/`'not-found'` are
+ *  unreached from this rail's UI (`capabilities.remove === false`) but handled
+ *  soundly regardless, matching the pre-EC-327 behaviour exactly. */
+export declare function normalizeAssetRemoveResult(result: DeleteAssetResult): OperationError | null;
 /**
  * Assemble a {@link CollectionViewSource} for the **assets rail** (EC-319) — the
  * portable list surface over the existing asset library store instead of a
@@ -50,5 +58,9 @@ export declare function documentToAssetMetaPatch(collection: CollectionDef, doc:
  *
  * Must be mounted under an `<AssetsProvider>` (for {@link useAssets}) — already
  * ambient at the project level (EC-195), so callers rarely mount their own.
+ *
+ * The shared scaffold (`useRailViewSource`, EC-327) owns `viewState`/`lastError`
+ * plumbing and the assembled source; this hook supplies only the asset-store
+ * reads/writes, the capability profile, and the projections above.
  */
 export declare function useAssetsCollectionViewSource(projectId: string, schema: CollectionDef): CollectionViewSource;

package/dist/components/assets/assets-collection-view-source.js

@@ -1,9 +1,9 @@
-import { useCallback, useMemo, useState } from 'react';
+import { useCallback, useMemo } from 'react';
 import { createCollectionRegistry, validateDocument } from '@elytracms/core/cms-core';
 import { studioPath } from '@elytracms/studio/router';
-import { defaultViewState } from '@elytracms/studio/lib/cms-views';
 import { useAssets } from './assets-store';
 import { SYSTEM_ASSET_FIELDS } from './asset-metadata';
+import { normalizeOkResult, useRailViewSource } from '../rail-view-source';
 /** The assets rail is not localized in v1 (EC-301: asset metadata is non-localized). */
 const ASSETS_LOCALE = 'en';
 const ASSETS_LOCALE_CONFIG = {
@@ -105,6 +105,19 @@ export function documentToAssetMetaPatch(collection, doc) {
     }
     return meta;
 }
+/** `create` when `capabilities.create === false` — never reached from the UI
+ *  (list/detail never call it); an explicit throw rather than a silent no-op. */
+function createUnsupported() {
+    throw new Error('assets are created by upload, not the assets rail');
+}
+/** Assets' `remove()` returns an `outcome`-discriminated {@link DeleteAssetResult}
+ *  (not the `{ ok }` shape users/redirects use, EC-327): only `'error'` is a
+ *  failure the shell surfaces via `lastError`. `'blocked'`/`'not-found'` are
+ *  unreached from this rail's UI (`capabilities.remove === false`) but handled
+ *  soundly regardless, matching the pre-EC-327 behaviour exactly. */
+export function normalizeAssetRemoveResult(result) {
+    return result.outcome === 'error' ? { code: 'unknown', message: result.message } : null;
+}
 /**
  * Assemble a {@link CollectionViewSource} for the **assets rail** (EC-319) — the
  * portable list surface over the existing asset library store instead of a
@@ -117,11 +130,13 @@ export function documentToAssetMetaPatch(collection, doc) {
  *
  * Must be mounted under an `<AssetsProvider>` (for {@link useAssets}) — already
  * ambient at the project level (EC-195), so callers rarely mount their own.
+ *
+ * The shared scaffold (`useRailViewSource`, EC-327) owns `viewState`/`lastError`
+ * plumbing and the assembled source; this hook supplies only the asset-store
+ * reads/writes, the capability profile, and the projections above.
  */
 export function useAssetsCollectionViewSource(projectId, schema) {
     const store = useAssets();
-    const [viewState, setViewStateRaw] = useState(() => defaultViewState(schema));
-    const [lastError, setLastError] = useState(null);
     const registry = useMemo(() => createCollectionRegistry([schema]), [schema]);
     const documents = useCallback(() => store.assets.map((record) => assetToDocument(schema, record)), [store.assets, schema]);
     const get = useCallback((ref) => {
@@ -132,55 +147,31 @@ export function useAssetsCollectionViewSource(projectId, schema) {
         const record = store.assets.find((a) => a.id === ref.id);
         return record?.title ?? record?.filename ?? ref.id;
     }, [store.assets]);
-    const setViewState = useCallback((update) => {
-        setViewStateRaw((prev) => (typeof update === 'function' ? update(prev) : update));
-    }, []);
-    const save = useCallback((doc) => {
-        const meta = documentToAssetMetaPatch(schema, doc);
-        void store.updateMetadata(doc.id, { meta }).then((result) => {
-            if (!result.ok)
-                setLastError({ code: 'unknown', message: result.message });
-        });
-    }, [schema, store]);
+    const validate = useCallback((doc) => validateDocument(registry, doc, { localeConfig: ASSETS_LOCALE_CONFIG }), [registry]);
+    const save = useCallback((doc) => store.updateMetadata(doc.id, { meta: documentToAssetMetaPatch(schema, doc) }), [schema, store]);
     // Unreached from the UI (`capabilities.remove === false`); implemented soundly
     // (the same checked delete the store always runs) in case anything ever calls
     // it directly, rather than throwing.
-    const remove = useCallback((ref) => {
-        void store.remove(ref.id).then((result) => {
-            if (result.outcome === 'error')
-                setLastError({ code: 'unknown', message: result.message });
-        });
-    }, [store]);
-    return useMemo(() => {
-        const source = {
-            collectionId: schema.id,
-            schema,
-            capabilities: ASSET_COLLECTION_CAPABILITIES,
-            projectId,
-            localeConfig: ASSETS_LOCALE_CONFIG,
-            activeLocale: ASSETS_LOCALE,
-            documents,
-            get,
-            titleOf,
-            // Assets carry no relation/asset fields of their own (v1) — nothing cross-collection to resolve.
-            referenceCandidates: () => [],
-            collections: [schema],
-            detailPath: (id) => studioPath.asset(id),
-            listPath: studioPath.assets(),
-            isFieldReadOnly: (field) => field.form?.readOnly ?? false,
-            validate: (doc) => validateDocument(registry, doc, { localeConfig: ASSETS_LOCALE_CONFIG }),
-            lastError,
-            clearLastError: () => setLastError(null),
-            viewState: () => viewState,
-            setViewState,
-            // create is gated off (capabilities.create === false); never reached.
-            create: () => {
-                throw new Error('assets are created by upload, not the assets rail');
-            },
-            save,
-            remove,
-        };
-        return source;
-    }, [projectId, schema, registry, documents, get, titleOf, setViewState, save, remove, viewState, lastError]);
+    const remove = useCallback((ref) => store.remove(ref.id), [store]);
+    return useRailViewSource({
+        projectId,
+        schema,
+        capabilities: ASSET_COLLECTION_CAPABILITIES,
+        localeConfig: ASSETS_LOCALE_CONFIG,
+        documents,
+        get,
+        titleOf,
+        // No `referenceCandidates`/`collections`/`isFieldReadOnly` override: assets carry
+        // no relation/asset fields of their own (v1) — nothing cross-collection to
+        // resolve — and read-only follows the factory's default `form.readOnly` check.
+        detailPath: (id) => studioPath.asset(id),
+        listPath: studioPath.assets(),
+        validate,
+        create: createUnsupported,
+        save,
+        remove,
+        normalizeSaveResult: normalizeOkResult,
+        normalizeRemoveResult: normalizeAssetRemoveResult,
+    });
 }
 //# sourceMappingURL=assets-collection-view-source.js.map

package/dist/components/assets/assets-collection-view-source.js.map

@@ -1 +1 @@
-{"version":3,"file":"assets-collection-view-source.js","sourceRoot":"","sources":["../../../src/components/assets/assets-collection-view-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAStD,OAAO,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAGrF,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAMlE,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAEtD,wFAAwF;AACxF,MAAM,aAAa,GAAW,IAAI,CAAA;AAClC,MAAM,oBAAoB,GAAiB;IACzC,OAAO,EAAE,aAAa;IACtB,OAAO,EAAE,CAAC,aAAa,CAAC;CACzB,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAA+B;IACvE,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,KAAK;IACd,SAAS,EAAE,KAAK;IAChB,YAAY,EAAE,KAAK;IACnB,SAAS,EAAE,KAAK;CACjB,CAAA;AAED,4EAA4E;AAC5E,SAAS,gBAAgB,CAAC,MAAmB,EAAE,IAAY;IACzD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,UAAU;YACb,OAAO,MAAM,CAAC,QAAQ,CAAA;QACxB,KAAK,KAAK;YACR,OAAO,MAAM,CAAC,GAAG,CAAA;QACnB,KAAK,aAAa;YAChB,OAAO,MAAM,CAAC,WAAW,CAAA;QAC3B,KAAK,UAAU;YACb,OAAO,MAAM,CAAC,QAAQ,CAAA;QACxB,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,KAAK,CAAA;QACrB,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,MAAM,CAAA;QACtB,KAAK,YAAY;YACf,OAAO,MAAM,CAAC,UAAU,CAAA;QAC1B,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,KAAK,CAAA;QACrB;YACE,OAAO,SAAS,CAAA;IACpB,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,UAAyB,EAAE,MAAmB;IAC5E,MAAM,MAAM,GAA4B,EAAE,CAAA;IAC1C,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,IAAI,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;YAClF,MAAM,CAAC,GAAG,GAAG,OAAO,IAAI,MAAM,CAAC,GAAG,CAAA;YAClC,SAAQ;QACV,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YACtD,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;YACtC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,CAAA;AAC7D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,UAAyB,EACzB,GAAgB;IAEhB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAA;IAC/B,MAAM,IAAI,GAA4B,EAAE,CAAA;IACxC,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtC,IAAI,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAQ;QACjD,IAAI,KAAK,CAAC,IAAI,IAAI,MAAM;YAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjE,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,6BAA6B,CAC3C,SAAiB,EACjB,MAAqB;IAErB,MAAM,KAAK,GAAG,SAAS,EAAE,CAAA;IACzB,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAiB,GAAG,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAA;IAC7F,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAwB,IAAI,CAAC,CAAA;IACvE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;IAE5E,MAAM,SAAS,GAAG,WAAW,CAC3B,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EACnE,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CACvB,CAAA;IACD,MAAM,GAAG,GAAG,WAAW,CACrB,CAAC,GAAgB,EAA2B,EAAE;QAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAA;QACxD,OAAO,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC7D,CAAC,EACD,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CACvB,CAAA;IACD,MAAM,OAAO,GAAG,WAAW,CACzB,CAAC,GAAgB,EAAU,EAAE;QAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAA;QACxD,OAAO,MAAM,EAAE,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,GAAG,CAAC,EAAE,CAAA;IACpD,CAAC,EACD,CAAC,KAAK,CAAC,MAAM,CAAC,CACf,CAAA;IACD,MAAM,YAAY,GAAG,WAAW,CAAuC,CAAC,MAAM,EAAE,EAAE;QAChF,eAAe,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;IACnF,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,MAAM,IAAI,GAAG,WAAW,CACtB,CAAC,GAAgB,EAAE,EAAE;QACnB,MAAM,IAAI,GAAG,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAClD,KAAK,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YAC1D,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,YAAY,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;QAC5E,CAAC,CAAC,CAAA;IACJ,CAAC,EACD,CAAC,MAAM,EAAE,KAAK,CAAC,CAChB,CAAA;IACD,+EAA+E;IAC/E,8EAA8E;IAC9E,qCAAqC;IACrC,MAAM,MAAM,GAAG,WAAW,CACxB,CAAC,GAAgB,EAAE,EAAE;QACnB,KAAK,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACxC,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;gBAAE,YAAY,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;QAC5F,CAAC,CAAC,CAAA;IACJ,CAAC,EACD,CAAC,KAAK,CAAC,CACR,CAAA;IAED,OAAO,OAAO,CAAC,GAAG,EAAE;QAClB,MAAM,MAAM,GAAyB;YACnC,YAAY,EAAE,MAAM,CAAC,EAAE;YACvB,MAAM;YACN,YAAY,EAAE,6BAA6B;YAC3C,SAAS;YACT,YAAY,EAAE,oBAAoB;YAClC,YAAY,EAAE,aAAa;YAC3B,SAAS;YACT,GAAG;YACH,OAAO;YACP,iGAAiG;YACjG,mBAAmB,EAAE,GAAG,EAAE,CAAC,EAAE;YAC7B,WAAW,EAAE,CAAC,MAAM,CAAC;YACrB,UAAU,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE;YAC7B,eAAe,EAAE,CAAC,KAAe,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,IAAI,KAAK;YACnE,QAAQ,EAAE,CAAC,GAAgB,EAAE,EAAE,CAC7B,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,oBAAoB,EAAE,CAAC;YACzE,SAAS;YACT,cAAc,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC;YACxC,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS;YAC1B,YAAY;YACZ,sEAAsE;YACtE,MAAM,EAAE,GAAG,EAAE;gBACX,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;YACtE,CAAC;YACD,IAAI;YACJ,MAAM;SACP,CAAA;QACD,OAAO,MAAM,CAAA;IACf,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;AAC9G,CAAC","sourcesContent":["import { useCallback, useMemo, useState } from 'react'\nimport type {\n  CmsDocument,\n  CollectionDef,\n  DocumentRef,\n  FieldDef,\n  Locale,\n  LocaleConfig,\n} from '@elytracms/core/cms-core'\nimport { createCollectionRegistry, validateDocument } from '@elytracms/core/cms-core'\nimport type { AssetRecord } from '@elytracms/core/persistence'\nimport type { OperationError } from '@elytracms/core/operations'\nimport { studioPath } from '@elytracms/studio/router'\nimport { defaultViewState } from '@elytracms/studio/lib/cms-views'\nimport type { TableViewState } from '@elytracms/studio/lib/cms-views'\nimport type {\n  CollectionViewCapabilities,\n  CollectionViewSource,\n} from '@elytracms/studio/lib/collection-view/collection-view-source'\nimport { useAssets } from './assets-store'\nimport { SYSTEM_ASSET_FIELDS } from './asset-metadata'\n\n/** The assets rail is not localized in v1 (EC-301: asset metadata is non-localized). */\nconst ASSETS_LOCALE: Locale = 'en'\nconst ASSETS_LOCALE_CONFIG: LocaleConfig = {\n  default: ASSETS_LOCALE,\n  locales: [ASSETS_LOCALE],\n}\n\n/**\n * The capability profile of the assets rail (EC-319). Hoisted to a module-level\n * constant (no prop/state dependency) so it's both the value the hook returns\n * AND independently unit-testable.\n *\n * `create` is off — a new asset comes from an upload, never a blank draft.\n * `remove` is off DELIBERATELY, even though the store can safely delete one\n * (EC-202): the universal table's generic row/bulk delete runs through\n * `ReferenceConfirmDialog`, which enumerates inbound references as\n * `{ type: 'document' }` targets — the wrong index shape for an asset (indexed\n * as `{ type: 'asset' }`, see `loadInboundAssetReferenceViews`). Wiring\n * `remove: true` here would silently show \"not referenced\" for an asset that\n * IS referenced. Deletion instead stays on the asset detail surface\n * (`asset-detail.tsx`), which keeps calling the asset-specific reference check.\n * Nothing else applies to assets: no publish/versions/locales/inline-edit/bulk/\n * live-URL/hierarchy/import-export.\n */\nexport const ASSET_COLLECTION_CAPABILITIES: CollectionViewCapabilities = {\n  publish: false,\n  versions: false,\n  locales: false,\n  inlineEdit: false,\n  create: false,\n  remove: false,\n  bulk: false,\n  liveUrl: false,\n  hierarchy: false,\n  importExport: false,\n  adminOnly: false,\n}\n\n/** Read one of the record's fixed, upload-managed columns by field name. */\nfunction systemFieldValue(record: AssetRecord, name: string): unknown {\n  switch (name) {\n    case 'filename':\n      return record.filename\n    case 'url':\n      return record.url\n    case 'contentType':\n      return record.contentType\n    case 'byteSize':\n      return record.byteSize\n    case 'width':\n      return record.width\n    case 'height':\n      return record.height\n    case 'storageKey':\n      return record.storageKey\n    case 'title':\n      return record.title\n    default:\n      return undefined\n  }\n}\n\n/**\n * Project a stored asset record into the lens's `values` shape (EC-319), reading\n * only the schema's DECLARED fields — the same \"schema is a lens\" projection the\n * redirects/users rails use. A system column (`filename`, `url`, dimensions, …)\n * reads straight off the record; everything else — the built-in `alt`, a\n * project's own `copyright`/`credit`, or an EC-311 additive field — round-trips\n * through the record's open `meta` bag (EC-301). `alt` is schema-driven but ALSO\n * has a legacy record column: the meta value wins, falling back to the column\n * (matches delivery's `meta.alt ?? record.alt` read and the image field's\n * options dialog).\n */\nexport function assetToDocument(collection: CollectionDef, record: AssetRecord): CmsDocument {\n  const values: Record<string, unknown> = {}\n  for (const field of collection.fields) {\n    if (field.name === 'alt') {\n      const metaAlt = typeof record.meta?.alt === 'string' ? record.meta.alt : undefined\n      values.alt = metaAlt ?? record.alt\n      continue\n    }\n    values[field.name] = SYSTEM_ASSET_FIELDS.has(field.name)\n      ? systemFieldValue(record, field.name)\n      : record.meta?.[field.name]\n  }\n  return { collection: collection.id, id: record.id, values }\n}\n\n/**\n * The inverse of {@link assetToDocument}: the schema-driven meta bag a save\n * writes back — every declared field OUTSIDE the system set (EC-301/EC-311),\n * keyed exactly as the record stores it. System columns are upload-managed and\n * never written here.\n */\nexport function documentToAssetMetaPatch(\n  collection: CollectionDef,\n  doc: CmsDocument,\n): Record<string, unknown> {\n  const values = doc.values ?? {}\n  const meta: Record<string, unknown> = {}\n  for (const field of collection.fields) {\n    if (SYSTEM_ASSET_FIELDS.has(field.name)) continue\n    if (field.name in values) meta[field.name] = values[field.name]\n  }\n  return meta\n}\n\n/**\n * Assemble a {@link CollectionViewSource} for the **assets rail** (EC-319) — the\n * portable list surface over the existing asset library store instead of a\n * bespoke listing. `schema` is the DEPLOYMENT-resolved `kind:'asset'` collection\n * (EC-311: a project's own declared fields, or a mount's `nav.assets({ fields })`\n * override merged over it — see `resolveAssetsSchema` in `app-views/default-modules.tsx`),\n * never a hardcoded engine default — so a project's `copyright`/`credit`/… fields\n * (and any EC-311 override) drive the list's columns/filters exactly as they\n * drive the image field's options dialog.\n *\n * Must be mounted under an `<AssetsProvider>` (for {@link useAssets}) — already\n * ambient at the project level (EC-195), so callers rarely mount their own.\n */\nexport function useAssetsCollectionViewSource(\n  projectId: string,\n  schema: CollectionDef,\n): CollectionViewSource {\n  const store = useAssets()\n  const [viewState, setViewStateRaw] = useState<TableViewState>(() => defaultViewState(schema))\n  const [lastError, setLastError] = useState<OperationError | null>(null)\n  const registry = useMemo(() => createCollectionRegistry([schema]), [schema])\n\n  const documents = useCallback(\n    () => store.assets.map((record) => assetToDocument(schema, record)),\n    [store.assets, schema],\n  )\n  const get = useCallback(\n    (ref: DocumentRef): CmsDocument | undefined => {\n      const record = store.assets.find((a) => a.id === ref.id)\n      return record ? assetToDocument(schema, record) : undefined\n    },\n    [store.assets, schema],\n  )\n  const titleOf = useCallback(\n    (ref: DocumentRef): string => {\n      const record = store.assets.find((a) => a.id === ref.id)\n      return record?.title ?? record?.filename ?? ref.id\n    },\n    [store.assets],\n  )\n  const setViewState = useCallback<CollectionViewSource['setViewState']>((update) => {\n    setViewStateRaw((prev) => (typeof update === 'function' ? update(prev) : update))\n  }, [])\n\n  const save = useCallback(\n    (doc: CmsDocument) => {\n      const meta = documentToAssetMetaPatch(schema, doc)\n      void store.updateMetadata(doc.id, { meta }).then((result) => {\n        if (!result.ok) setLastError({ code: 'unknown', message: result.message })\n      })\n    },\n    [schema, store],\n  )\n  // Unreached from the UI (`capabilities.remove === false`); implemented soundly\n  // (the same checked delete the store always runs) in case anything ever calls\n  // it directly, rather than throwing.\n  const remove = useCallback(\n    (ref: DocumentRef) => {\n      void store.remove(ref.id).then((result) => {\n        if (result.outcome === 'error') setLastError({ code: 'unknown', message: result.message })\n      })\n    },\n    [store],\n  )\n\n  return useMemo(() => {\n    const source: CollectionViewSource = {\n      collectionId: schema.id,\n      schema,\n      capabilities: ASSET_COLLECTION_CAPABILITIES,\n      projectId,\n      localeConfig: ASSETS_LOCALE_CONFIG,\n      activeLocale: ASSETS_LOCALE,\n      documents,\n      get,\n      titleOf,\n      // Assets carry no relation/asset fields of their own (v1) — nothing cross-collection to resolve.\n      referenceCandidates: () => [],\n      collections: [schema],\n      detailPath: (id: string) => studioPath.asset(id),\n      listPath: studioPath.assets(),\n      isFieldReadOnly: (field: FieldDef) => field.form?.readOnly ?? false,\n      validate: (doc: CmsDocument) =>\n        validateDocument(registry, doc, { localeConfig: ASSETS_LOCALE_CONFIG }),\n      lastError,\n      clearLastError: () => setLastError(null),\n      viewState: () => viewState,\n      setViewState,\n      // create is gated off (capabilities.create === false); never reached.\n      create: () => {\n        throw new Error('assets are created by upload, not the assets rail')\n      },\n      save,\n      remove,\n    }\n    return source\n  }, [projectId, schema, registry, documents, get, titleOf, setViewState, save, remove, viewState, lastError])\n}\n"]}
+{"version":3,"file":"assets-collection-view-source.js","sourceRoot":"","sources":["../../../src/components/assets/assets-collection-view-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,OAAO,CAAA;AAE5C,OAAO,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAGrF,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAGrD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAE1E,wFAAwF;AACxF,MAAM,aAAa,GAAW,IAAI,CAAA;AAClC,MAAM,oBAAoB,GAAiB;IACzC,OAAO,EAAE,aAAa;IACtB,OAAO,EAAE,CAAC,aAAa,CAAC;CACzB,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAA+B;IACvE,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,KAAK;IACd,SAAS,EAAE,KAAK;IAChB,YAAY,EAAE,KAAK;IACnB,SAAS,EAAE,KAAK;CACjB,CAAA;AAED,4EAA4E;AAC5E,SAAS,gBAAgB,CAAC,MAAmB,EAAE,IAAY;IACzD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,UAAU;YACb,OAAO,MAAM,CAAC,QAAQ,CAAA;QACxB,KAAK,KAAK;YACR,OAAO,MAAM,CAAC,GAAG,CAAA;QACnB,KAAK,aAAa;YAChB,OAAO,MAAM,CAAC,WAAW,CAAA;QAC3B,KAAK,UAAU;YACb,OAAO,MAAM,CAAC,QAAQ,CAAA;QACxB,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,KAAK,CAAA;QACrB,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,MAAM,CAAA;QACtB,KAAK,YAAY;YACf,OAAO,MAAM,CAAC,UAAU,CAAA;QAC1B,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,KAAK,CAAA;QACrB;YACE,OAAO,SAAS,CAAA;IACpB,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,UAAyB,EAAE,MAAmB;IAC5E,MAAM,MAAM,GAA4B,EAAE,CAAA;IAC1C,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,IAAI,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;YAClF,MAAM,CAAC,GAAG,GAAG,OAAO,IAAI,MAAM,CAAC,GAAG,CAAA;YAClC,SAAQ;QACV,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YACtD,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;YACtC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,CAAA;AAC7D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,UAAyB,EACzB,GAAgB;IAEhB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAA;IAC/B,MAAM,IAAI,GAA4B,EAAE,CAAA;IACxC,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtC,IAAI,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAQ;QACjD,IAAI,KAAK,CAAC,IAAI,IAAI,MAAM;YAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjE,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;iFACiF;AACjF,SAAS,iBAAiB;IACxB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;AACtE,CAAC;AAED;;;;qEAIqE;AACrE,MAAM,UAAU,0BAA0B,CAAC,MAAyB;IAClE,OAAO,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AACzF,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,6BAA6B,CAC3C,SAAiB,EACjB,MAAqB;IAErB,MAAM,KAAK,GAAG,SAAS,EAAE,CAAA;IACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;IAE5E,MAAM,SAAS,GAAG,WAAW,CAC3B,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EACnE,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CACvB,CAAA;IACD,MAAM,GAAG,GAAG,WAAW,CACrB,CAAC,GAAgB,EAA2B,EAAE;QAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAA;QACxD,OAAO,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC7D,CAAC,EACD,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CACvB,CAAA;IACD,MAAM,OAAO,GAAG,WAAW,CACzB,CAAC,GAAgB,EAAU,EAAE;QAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAA;QACxD,OAAO,MAAM,EAAE,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,GAAG,CAAC,EAAE,CAAA;IACpD,CAAC,EACD,CAAC,KAAK,CAAC,MAAM,CAAC,CACf,CAAA;IACD,MAAM,QAAQ,GAAG,WAAW,CAC1B,CAAC,GAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,oBAAoB,EAAE,CAAC,EAC7F,CAAC,QAAQ,CAAC,CACX,CAAA;IACD,MAAM,IAAI,GAAG,WAAW,CACtB,CAAC,GAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,EACnG,CAAC,MAAM,EAAE,KAAK,CAAC,CAChB,CAAA;IACD,+EAA+E;IAC/E,8EAA8E;IAC9E,qCAAqC;IACrC,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IAE/E,OAAO,iBAAiB,CAAC;QACvB,SAAS;QACT,MAAM;QACN,YAAY,EAAE,6BAA6B;QAC3C,YAAY,EAAE,oBAAoB;QAClC,SAAS;QACT,GAAG;QACH,OAAO;QACP,kFAAkF;QAClF,2EAA2E;QAC3E,+EAA+E;QAC/E,UAAU,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE;QAC7B,QAAQ;QACR,MAAM,EAAE,iBAAiB;QACzB,IAAI;QACJ,MAAM;QACN,mBAAmB,EAAE,iBAAiB;QACtC,qBAAqB,EAAE,0BAA0B;KAClD,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { useCallback, useMemo } from 'react'\nimport type { CmsDocument, CollectionDef, DocumentRef, Locale, LocaleConfig } from '@elytracms/core/cms-core'\nimport { createCollectionRegistry, validateDocument } from '@elytracms/core/cms-core'\nimport type { AssetRecord } from '@elytracms/core/persistence'\nimport type { OperationError } from '@elytracms/core/operations'\nimport { studioPath } from '@elytracms/studio/router'\nimport type { DeleteAssetResult } from '@elytracms/studio/lib/assets'\nimport type { CollectionViewSource, CollectionViewCapabilities } from '@elytracms/studio/lib/collection-view/collection-view-source'\nimport { useAssets } from './assets-store'\nimport { SYSTEM_ASSET_FIELDS } from './asset-metadata'\nimport { normalizeOkResult, useRailViewSource } from '../rail-view-source'\n\n/** The assets rail is not localized in v1 (EC-301: asset metadata is non-localized). */\nconst ASSETS_LOCALE: Locale = 'en'\nconst ASSETS_LOCALE_CONFIG: LocaleConfig = {\n  default: ASSETS_LOCALE,\n  locales: [ASSETS_LOCALE],\n}\n\n/**\n * The capability profile of the assets rail (EC-319). Hoisted to a module-level\n * constant (no prop/state dependency) so it's both the value the hook returns\n * AND independently unit-testable.\n *\n * `create` is off — a new asset comes from an upload, never a blank draft.\n * `remove` is off DELIBERATELY, even though the store can safely delete one\n * (EC-202): the universal table's generic row/bulk delete runs through\n * `ReferenceConfirmDialog`, which enumerates inbound references as\n * `{ type: 'document' }` targets — the wrong index shape for an asset (indexed\n * as `{ type: 'asset' }`, see `loadInboundAssetReferenceViews`). Wiring\n * `remove: true` here would silently show \"not referenced\" for an asset that\n * IS referenced. Deletion instead stays on the asset detail surface\n * (`asset-detail.tsx`), which keeps calling the asset-specific reference check.\n * Nothing else applies to assets: no publish/versions/locales/inline-edit/bulk/\n * live-URL/hierarchy/import-export.\n */\nexport const ASSET_COLLECTION_CAPABILITIES: CollectionViewCapabilities = {\n  publish: false,\n  versions: false,\n  locales: false,\n  inlineEdit: false,\n  create: false,\n  remove: false,\n  bulk: false,\n  liveUrl: false,\n  hierarchy: false,\n  importExport: false,\n  adminOnly: false,\n}\n\n/** Read one of the record's fixed, upload-managed columns by field name. */\nfunction systemFieldValue(record: AssetRecord, name: string): unknown {\n  switch (name) {\n    case 'filename':\n      return record.filename\n    case 'url':\n      return record.url\n    case 'contentType':\n      return record.contentType\n    case 'byteSize':\n      return record.byteSize\n    case 'width':\n      return record.width\n    case 'height':\n      return record.height\n    case 'storageKey':\n      return record.storageKey\n    case 'title':\n      return record.title\n    default:\n      return undefined\n  }\n}\n\n/**\n * Project a stored asset record into the lens's `values` shape (EC-319), reading\n * only the schema's DECLARED fields — the same \"schema is a lens\" projection the\n * redirects/users rails use. A system column (`filename`, `url`, dimensions, …)\n * reads straight off the record; everything else — the built-in `alt`, a\n * project's own `copyright`/`credit`, or an EC-311 additive field — round-trips\n * through the record's open `meta` bag (EC-301). `alt` is schema-driven but ALSO\n * has a legacy record column: the meta value wins, falling back to the column\n * (matches delivery's `meta.alt ?? record.alt` read and the image field's\n * options dialog).\n */\nexport function assetToDocument(collection: CollectionDef, record: AssetRecord): CmsDocument {\n  const values: Record<string, unknown> = {}\n  for (const field of collection.fields) {\n    if (field.name === 'alt') {\n      const metaAlt = typeof record.meta?.alt === 'string' ? record.meta.alt : undefined\n      values.alt = metaAlt ?? record.alt\n      continue\n    }\n    values[field.name] = SYSTEM_ASSET_FIELDS.has(field.name)\n      ? systemFieldValue(record, field.name)\n      : record.meta?.[field.name]\n  }\n  return { collection: collection.id, id: record.id, values }\n}\n\n/**\n * The inverse of {@link assetToDocument}: the schema-driven meta bag a save\n * writes back — every declared field OUTSIDE the system set (EC-301/EC-311),\n * keyed exactly as the record stores it. System columns are upload-managed and\n * never written here.\n */\nexport function documentToAssetMetaPatch(\n  collection: CollectionDef,\n  doc: CmsDocument,\n): Record<string, unknown> {\n  const values = doc.values ?? {}\n  const meta: Record<string, unknown> = {}\n  for (const field of collection.fields) {\n    if (SYSTEM_ASSET_FIELDS.has(field.name)) continue\n    if (field.name in values) meta[field.name] = values[field.name]\n  }\n  return meta\n}\n\n/** `create` when `capabilities.create === false` — never reached from the UI\n *  (list/detail never call it); an explicit throw rather than a silent no-op. */\nfunction createUnsupported(): DocumentRef {\n  throw new Error('assets are created by upload, not the assets rail')\n}\n\n/** Assets' `remove()` returns an `outcome`-discriminated {@link DeleteAssetResult}\n *  (not the `{ ok }` shape users/redirects use, EC-327): only `'error'` is a\n *  failure the shell surfaces via `lastError`. `'blocked'`/`'not-found'` are\n *  unreached from this rail's UI (`capabilities.remove === false`) but handled\n *  soundly regardless, matching the pre-EC-327 behaviour exactly. */\nexport function normalizeAssetRemoveResult(result: DeleteAssetResult): OperationError | null {\n  return result.outcome === 'error' ? { code: 'unknown', message: result.message } : null\n}\n\n/**\n * Assemble a {@link CollectionViewSource} for the **assets rail** (EC-319) — the\n * portable list surface over the existing asset library store instead of a\n * bespoke listing. `schema` is the DEPLOYMENT-resolved `kind:'asset'` collection\n * (EC-311: a project's own declared fields, or a mount's `nav.assets({ fields })`\n * override merged over it — see `resolveAssetsSchema` in `app-views/default-modules.tsx`),\n * never a hardcoded engine default — so a project's `copyright`/`credit`/… fields\n * (and any EC-311 override) drive the list's columns/filters exactly as they\n * drive the image field's options dialog.\n *\n * Must be mounted under an `<AssetsProvider>` (for {@link useAssets}) — already\n * ambient at the project level (EC-195), so callers rarely mount their own.\n *\n * The shared scaffold (`useRailViewSource`, EC-327) owns `viewState`/`lastError`\n * plumbing and the assembled source; this hook supplies only the asset-store\n * reads/writes, the capability profile, and the projections above.\n */\nexport function useAssetsCollectionViewSource(\n  projectId: string,\n  schema: CollectionDef,\n): CollectionViewSource {\n  const store = useAssets()\n  const registry = useMemo(() => createCollectionRegistry([schema]), [schema])\n\n  const documents = useCallback(\n    () => store.assets.map((record) => assetToDocument(schema, record)),\n    [store.assets, schema],\n  )\n  const get = useCallback(\n    (ref: DocumentRef): CmsDocument | undefined => {\n      const record = store.assets.find((a) => a.id === ref.id)\n      return record ? assetToDocument(schema, record) : undefined\n    },\n    [store.assets, schema],\n  )\n  const titleOf = useCallback(\n    (ref: DocumentRef): string => {\n      const record = store.assets.find((a) => a.id === ref.id)\n      return record?.title ?? record?.filename ?? ref.id\n    },\n    [store.assets],\n  )\n  const validate = useCallback(\n    (doc: CmsDocument) => validateDocument(registry, doc, { localeConfig: ASSETS_LOCALE_CONFIG }),\n    [registry],\n  )\n  const save = useCallback(\n    (doc: CmsDocument) => store.updateMetadata(doc.id, { meta: documentToAssetMetaPatch(schema, doc) }),\n    [schema, store],\n  )\n  // Unreached from the UI (`capabilities.remove === false`); implemented soundly\n  // (the same checked delete the store always runs) in case anything ever calls\n  // it directly, rather than throwing.\n  const remove = useCallback((ref: DocumentRef) => store.remove(ref.id), [store])\n\n  return useRailViewSource({\n    projectId,\n    schema,\n    capabilities: ASSET_COLLECTION_CAPABILITIES,\n    localeConfig: ASSETS_LOCALE_CONFIG,\n    documents,\n    get,\n    titleOf,\n    // No `referenceCandidates`/`collections`/`isFieldReadOnly` override: assets carry\n    // no relation/asset fields of their own (v1) — nothing cross-collection to\n    // resolve — and read-only follows the factory's default `form.readOnly` check.\n    detailPath: (id: string) => studioPath.asset(id),\n    listPath: studioPath.assets(),\n    validate,\n    create: createUnsupported,\n    save,\n    remove,\n    normalizeSaveResult: normalizeOkResult,\n    normalizeRemoveResult: normalizeAssetRemoveResult,\n  })\n}\n"]}

package/dist/components/cms/cms-store.js

@@ -11,7 +11,7 @@ import { createRequiredContext } from '@elytracms/studio/lib/required-context';
 import { createCmsPersister, getStudioOperations } from '@elytracms/studio/lib/operations';
 import { ALL_VIEW_ID, canonicalViewState, configViewsFor, defaultViewState, viewStatesEqual, } from '@elytracms/studio/lib/cms-views';
 import { useOptionalAssets } from '../assets/assets-store';
-import { stagedDocuments } from './document-staging';
+import { consumeStagedDocuments } from './document-staging';
 import { applyCellValue, commitCellEdit } from './cell-edit';
 import { runBulkAction } from './bulk-actions';
 const { Context: CmsContext, useRequired: useCms } = createRequiredContext('Cms');
@@ -83,16 +83,14 @@ function defaultView(collection) {
 export function CmsProvider({ children, projectId, initialCollections, initialDocuments, initialPublishedKeys, initialLocaleConfig, }) {
     const [documents, setDocuments] = useState(() => {
         const seeded = (initialDocuments ?? sampleDocuments).map((d) => structuredClone(d));
-        // EC-320: merge any documents STAGED by the Components-view "Use in document…"
-        // transfer (a playground cross-mount handoff — see document-staging). Staged
-        // wins by id; empty in Convex mode, where hydration is the source of truth.
-        const staged = stagedDocuments(projectId);
-        if (staged.length === 0)
-            return seeded;
-        const byKey = new Map(seeded.map((d) => [`${d.collection}/${d.id}`, d]));
-        for (const d of staged)
-            byKey.set(`${d.collection}/${d.id}`, d);
-        return [...byKey.values()];
+        // EC-320 (0.0.44 follow-up): merge any documents STAGED by the
+        // Components-view "Use in document…" transfer — a cross-mount handoff in
+        // EVERY mode now (see document-staging.ts), not just the playground. The
+        // merge rule itself stays mode-aware there: playground's seeded set is a
+        // static baseline that never reflects a write (staged always wins);
+        // Convex's is a fresh per-mount hydration query (staged fills gaps only,
+        // dropped once the seeded set actually carries the key).
+        return consumeStagedDocuments(projectId, seeded);
     });
     // Published-ness as the version POINTER (EC-224), decoupled from the flat
     // `state` enum: seeded from hydration's pointer set, or — when none is supplied