@elytracms/studio 0.0.67 → 0.0.69

package/dist/components/redirects/redirects-collection-view-source.js.map

@@ -1 +1 @@
-{"version":3,"file":"redirects-collection-view-source.js","sourceRoot":"","sources":["../../../src/components/redirects/redirects-collection-view-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,OAAO,CAAA;AAE5C,OAAO,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAErF,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAKrD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAE7F,uFAAuF;AACvF,MAAM,gBAAgB,GAAW,IAAI,CAAA;AACrC,MAAM,uBAAuB,GAAiB;IAC5C,OAAO,EAAE,gBAAgB;IACzB,OAAO,EAAE,CAAC,gBAAgB,CAAC;CAC5B,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA+B;IAC1E,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,MAAM,EAAE,IAAI,EAAE,2BAA2B;IACzC,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,KAAK;IACd,SAAS,EAAE,KAAK;IAChB,YAAY,EAAE,KAAK;IACnB,SAAS,EAAE,KAAK,EAAE,8BAA8B;CACjD,CAAA;AAED;;;;;GAKG;AACH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC,sBAAsB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;AAE3F,gEAAgE;AAChE,MAAM,UAAU,kBAAkB,CAAC,KAAoB;IACrD,OAAO;QACL,UAAU,EAAE,sBAAsB,CAAC,EAAE;QACrC,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,MAAM,EAAE;YACN,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,8EAA8E;YAC9E,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;SACtB;KACF,CAAA;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,sBAAsB,CAAC,GAAgB;IACrD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAA;IAC/B,gFAAgF;IAChF,kFAAkF;IAClF,iFAAiF;IACjF,gFAAgF;IAChF,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAA;IACjE,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QACxD,EAAE,EAAE,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;QAClD,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;QAC1E,OAAO,EAAE,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;QACpE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,gCAAgC,CAC9C,SAAiB,EACjB,SAAwB,sBAAsB;IAE9C,MAAM,KAAK,GAAG,YAAY,EAAE,CAAA;IAC5B,mFAAmF;IACnF,iFAAiF;IACjF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;IAE5E,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;IAC/F,MAAM,GAAG,GAAG,WAAW,CACrB,CAAC,GAAgB,EAA2B,EAAE;QAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAChC,OAAO,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACxD,CAAC,EACD,CAAC,KAAK,CAAC,CACR,CAAA;IACD,MAAM,OAAO,GAAG,WAAW,CACzB,CAAC,GAAgB,EAAU,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,IAAI,gBAAgB,EACzE,CAAC,KAAK,CAAC,CACR,CAAA;IACD,MAAM,QAAQ,GAAG,WAAW,CAC1B,CAAC,GAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,uBAAuB,EAAE,CAAC,EAChG,CAAC,QAAQ,CAAC,CACX,CAAA;IACD,MAAM,MAAM,GAAG,WAAW,CACxB,GAAgB,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,sBAAsB,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,EACvF,CAAC,KAAK,CAAC,CACR,CAAA;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IAChG,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IAE/E,OAAO,iBAAiB,CAAC;QACvB,SAAS;QACT,MAAM;QACN,YAAY,EAAE,gCAAgC;QAC9C,YAAY,EAAE,uBAAuB;QACrC,SAAS;QACT,GAAG;QACH,OAAO;QACP,sEAAsE;QACtE,qEAAqE;QACrE,qDAAqD;QACrD,UAAU,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,QAAQ,EAAE,UAAU,CAAC,SAAS,EAAE;QAChC,QAAQ;QACR,MAAM;QACN,IAAI;QACJ,MAAM;QACN,mBAAmB,EAAE,iBAAiB;QACtC,qBAAqB,EAAE,iBAAiB;KACzC,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { useCallback, useMemo } from 'react'\nimport type { CmsDocument, CollectionDef, DocumentRef, Locale, LocaleConfig } from '@elytracms/core/cms-core'\nimport { createCollectionRegistry, validateDocument } from '@elytracms/core/cms-core'\nimport type { RedirectEntry, SaveRedirectInput } from '@elytracms/core/persistence'\nimport { studioPath } from '@elytracms/studio/router'\nimport type {\n  CollectionViewCapabilities,\n  CollectionViewSource,\n} from '@elytracms/studio/lib/collection-view/collection-view-source'\nimport { useRedirects } from './redirects-store'\nimport { redirectsCollectionDef } from './redirects-schema'\nimport { metaBagProjection, normalizeOkResult, useRailViewSource } from '../rail-view-source'\n\n/** The redirects rail is not localized — one implicit locale keeps the lens honest. */\nconst REDIRECTS_LOCALE: Locale = 'en'\nconst REDIRECTS_LOCALE_CONFIG: LocaleConfig = {\n  default: REDIRECTS_LOCALE,\n  locales: [REDIRECTS_LOCALE],\n}\n\n/**\n * The capability profile of the redirects rail (EC-303): content-gated, create\n * + remove, no publish/versions/locales — redirects are CONTENT (an editor\n * owns them), so unlike the users rail this source allows `create`, is NOT\n * admin-only, and needs no principal field-access policy. Hoisted to a\n * module-level constant (EC-327), mirroring `ASSET_COLLECTION_CAPABILITIES`.\n */\nexport const REDIRECT_COLLECTION_CAPABILITIES: CollectionViewCapabilities = {\n  publish: false,\n  versions: false,\n  locales: false,\n  inlineEdit: false,\n  create: true, // editors create redirects\n  remove: true,\n  bulk: false,\n  liveUrl: false,\n  hierarchy: false,\n  importExport: false,\n  adminOnly: false, // content, not administration\n}\n\n/**\n * The canonical redirect fields — the storage/delivery contract of the primitive\n * rail. Anything a mount adds via *additive* `nav.redirects({ fields })` (EC-311\n * Tier 2) is by definition NOT one of these, so its value round-trips through the\n * record's open `meta` bag. Derived from the built-in def so the two never drift.\n */\nconst CANONICAL_REDIRECT_FIELDS = new Set(redirectsCollectionDef.fields.map((f) => f.name))\n\n/** Project a stored redirect into the lens's `values` shape. */\nexport function redirectToDocument(entry: RedirectEntry): CmsDocument {\n  return {\n    collection: redirectsCollectionDef.id,\n    id: entry.id,\n    values: {\n      from: entry.from,\n      to: entry.to,\n      permanent: entry.permanent,\n      enabled: entry.enabled,\n      // EC-311 Tier 2: additive schema fields round-trip through the open meta bag.\n      ...(entry.meta ?? {}),\n    },\n  }\n}\n\n/** Map an edited lens document back to the redirect write contract. */\nexport function documentToSaveRedirect(doc: CmsDocument): SaveRedirectInput {\n  const values = doc.values ?? {}\n  // EC-311 Tier 2: any value keyed outside the canonical set comes from a mount's\n  // additive `nav.redirects({ fields })` override — persist it in the meta bag. The\n  // editor holds the complete additive set, so this is the whole bag (replace, not\n  // merge). Omit `meta` entirely for the default rail so its saves are unchanged.\n  const meta = metaBagProjection(values, CANONICAL_REDIRECT_FIELDS)\n  return {\n    id: doc.id,\n    from: typeof values.from === 'string' ? values.from : '',\n    to: typeof values.to === 'string' ? values.to : '',\n    permanent: typeof values.permanent === 'boolean' ? values.permanent : true,\n    enabled: typeof values.enabled === 'boolean' ? values.enabled : true,\n    ...(Object.keys(meta).length > 0 ? { meta } : {}),\n  }\n}\n\n/**\n * Assemble a {@link CollectionViewSource} for the **redirects rail** (EC-303) —\n * the portable list/edit surfaces over the editorial redirects store instead of\n * the CMS store. Redirects are CONTENT (an editor owns them), so unlike the users\n * rail this source allows `create`, is NOT admin-only, and needs no principal\n * field-access policy. No publish/versions/locales/inline/bulk/import — a redirect\n * is a small record saved explicitly (a saved+enabled one is live).\n *\n * Must be mounted under a `RedirectsProvider` (for {@link useRedirects}).\n *\n * `schema` defaults to the engine-owned {@link redirectsCollectionDef}; a mount may\n * pass a customized def (EC-311 — built-in fields overridden by equal name via\n * `nav.redirects({ fields })`). The canonical `from`/`to`/`permanent`/`enabled`\n * names+types are contract-locked, so the projection helpers still read the same\n * canonical values; a mount's *additive* fields (Tier 2) round-trip through the\n * record's open `meta` bag ({@link documentToSaveRedirect}/{@link redirectToDocument}).\n *\n * The shared scaffold (`useRailViewSource`, EC-327) owns `viewState`/`lastError`\n * plumbing and the assembled source; this hook supplies only the redirects-store\n * reads/writes, the capability profile, and the registry-driven `validate`.\n */\nexport function useRedirectsCollectionViewSource(\n  projectId: string,\n  schema: CollectionDef = redirectsCollectionDef,\n): CollectionViewSource {\n  const store = useRedirects()\n  // EC-311: run the (possibly customized) schema's validation — required/pattern and\n  // custom `validate` fns on an overridden field must actually fire in the editor.\n  const registry = useMemo(() => createCollectionRegistry([schema]), [schema])\n\n  const documents = useCallback(() => store.redirects.map(redirectToDocument), [store.redirects])\n  const get = useCallback(\n    (ref: DocumentRef): CmsDocument | undefined => {\n      const record = store.get(ref.id)\n      return record ? redirectToDocument(record) : undefined\n    },\n    [store],\n  )\n  const titleOf = useCallback(\n    (ref: DocumentRef): string => store.get(ref.id)?.from || '(new redirect)',\n    [store],\n  )\n  const validate = useCallback(\n    (doc: CmsDocument) => validateDocument(registry, doc, { localeConfig: REDIRECTS_LOCALE_CONFIG }),\n    [registry],\n  )\n  const create = useCallback(\n    (): DocumentRef => ({ collection: redirectsCollectionDef.id, id: store.createDraft() }),\n    [store],\n  )\n  const save = useCallback((doc: CmsDocument) => store.save(documentToSaveRedirect(doc)), [store])\n  const remove = useCallback((ref: DocumentRef) => store.remove(ref.id), [store])\n\n  return useRailViewSource({\n    projectId,\n    schema,\n    capabilities: REDIRECT_COLLECTION_CAPABILITIES,\n    localeConfig: REDIRECTS_LOCALE_CONFIG,\n    documents,\n    get,\n    titleOf,\n    // No `referenceCandidates`/`collections` override: redirects carry no\n    // relation/asset fields, so nothing cross-collection to resolve (the\n    // factory's `() => []` / `[schema]` defaults apply).\n    detailPath: (id: string) => studioPath.redirect(id),\n    listPath: studioPath.redirects(),\n    validate,\n    create,\n    save,\n    remove,\n    normalizeSaveResult: normalizeOkResult,\n    normalizeRemoveResult: normalizeOkResult,\n  })\n}\n"]}
+{"version":3,"file":"redirects-collection-view-source.js","sourceRoot":"","sources":["../../../src/components/redirects/redirects-collection-view-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,OAAO,CAAA;AAE5C,OAAO,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAErF,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAKrD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAE7F,uFAAuF;AACvF,MAAM,gBAAgB,GAAW,IAAI,CAAA;AACrC,MAAM,uBAAuB,GAAiB;IAC5C,OAAO,EAAE,gBAAgB;IACzB,OAAO,EAAE,CAAC,gBAAgB,CAAC;CAC5B,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA+B;IAC1E,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,MAAM,EAAE,IAAI,EAAE,2BAA2B;IACzC,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,IAAI,EAAE,kEAAkE;IAC9E,OAAO,EAAE,KAAK;IACd,SAAS,EAAE,KAAK;IAChB,YAAY,EAAE,KAAK;IACnB,SAAS,EAAE,KAAK,EAAE,8BAA8B;CACjD,CAAA;AAED;;;;;GAKG;AACH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC,sBAAsB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;AAE3F,gEAAgE;AAChE,MAAM,UAAU,kBAAkB,CAAC,KAAoB;IACrD,OAAO;QACL,UAAU,EAAE,sBAAsB,CAAC,EAAE;QACrC,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,MAAM,EAAE;YACN,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,8EAA8E;YAC9E,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;SACtB;KACF,CAAA;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,sBAAsB,CAAC,GAAgB;IACrD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAA;IAC/B,gFAAgF;IAChF,kFAAkF;IAClF,iFAAiF;IACjF,gFAAgF;IAChF,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAA;IACjE,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QACxD,EAAE,EAAE,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;QAClD,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;QAC1E,OAAO,EAAE,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;QACpE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,gCAAgC,CAC9C,SAAiB,EACjB,SAAwB,sBAAsB;IAE9C,MAAM,KAAK,GAAG,YAAY,EAAE,CAAA;IAC5B,mFAAmF;IACnF,iFAAiF;IACjF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;IAE5E,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;IAC/F,MAAM,GAAG,GAAG,WAAW,CACrB,CAAC,GAAgB,EAA2B,EAAE;QAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAChC,OAAO,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACxD,CAAC,EACD,CAAC,KAAK,CAAC,CACR,CAAA;IACD,MAAM,OAAO,GAAG,WAAW,CACzB,CAAC,GAAgB,EAAU,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,IAAI,gBAAgB,EACzE,CAAC,KAAK,CAAC,CACR,CAAA;IACD,MAAM,QAAQ,GAAG,WAAW,CAC1B,CAAC,GAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,uBAAuB,EAAE,CAAC,EAChG,CAAC,QAAQ,CAAC,CACX,CAAA;IACD,MAAM,MAAM,GAAG,WAAW,CACxB,GAAgB,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,sBAAsB,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,EACvF,CAAC,KAAK,CAAC,CACR,CAAA;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IAChG,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IAE/E,OAAO,iBAAiB,CAAC;QACvB,SAAS;QACT,MAAM;QACN,YAAY,EAAE,gCAAgC;QAC9C,YAAY,EAAE,uBAAuB;QACrC,SAAS;QACT,GAAG;QACH,OAAO;QACP,sEAAsE;QACtE,qEAAqE;QACrE,qDAAqD;QACrD,UAAU,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,QAAQ,EAAE,UAAU,CAAC,SAAS,EAAE;QAChC,QAAQ;QACR,MAAM;QACN,IAAI;QACJ,MAAM;QACN,mBAAmB,EAAE,iBAAiB;QACtC,qBAAqB,EAAE,iBAAiB;KACzC,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { useCallback, useMemo } from 'react'\nimport type { CmsDocument, CollectionDef, DocumentRef, Locale, LocaleConfig } from '@elytracms/core/cms-core'\nimport { createCollectionRegistry, validateDocument } from '@elytracms/core/cms-core'\nimport type { RedirectEntry, SaveRedirectInput } from '@elytracms/core/persistence'\nimport { studioPath } from '@elytracms/studio/router'\nimport type {\n  CollectionViewCapabilities,\n  CollectionViewSource,\n} from '@elytracms/studio/lib/collection-view/collection-view-source'\nimport { useRedirects } from './redirects-store'\nimport { redirectsCollectionDef } from './redirects-schema'\nimport { metaBagProjection, normalizeOkResult, useRailViewSource } from '../rail-view-source'\n\n/** The redirects rail is not localized — one implicit locale keeps the lens honest. */\nconst REDIRECTS_LOCALE: Locale = 'en'\nconst REDIRECTS_LOCALE_CONFIG: LocaleConfig = {\n  default: REDIRECTS_LOCALE,\n  locales: [REDIRECTS_LOCALE],\n}\n\n/**\n * The capability profile of the redirects rail (EC-303): content-gated, create\n * + remove, no publish/versions/locales — redirects are CONTENT (an editor\n * owns them), so unlike the users rail this source allows `create`, is NOT\n * admin-only, and needs no principal field-access policy. Hoisted to a\n * module-level constant (EC-327), mirroring `ASSET_COLLECTION_CAPABILITIES`.\n */\nexport const REDIRECT_COLLECTION_CAPABILITIES: CollectionViewCapabilities = {\n  publish: false,\n  versions: false,\n  locales: false,\n  inlineEdit: false,\n  create: true, // editors create redirects\n  remove: true,\n  bulk: true, // EC-433: bulk delete = the same per-id remove, honestly reported\n  liveUrl: false,\n  hierarchy: false,\n  importExport: false,\n  adminOnly: false, // content, not administration\n}\n\n/**\n * The canonical redirect fields — the storage/delivery contract of the primitive\n * rail. Anything a mount adds via *additive* `nav.redirects({ fields })` (EC-311\n * Tier 2) is by definition NOT one of these, so its value round-trips through the\n * record's open `meta` bag. Derived from the built-in def so the two never drift.\n */\nconst CANONICAL_REDIRECT_FIELDS = new Set(redirectsCollectionDef.fields.map((f) => f.name))\n\n/** Project a stored redirect into the lens's `values` shape. */\nexport function redirectToDocument(entry: RedirectEntry): CmsDocument {\n  return {\n    collection: redirectsCollectionDef.id,\n    id: entry.id,\n    values: {\n      from: entry.from,\n      to: entry.to,\n      permanent: entry.permanent,\n      enabled: entry.enabled,\n      // EC-311 Tier 2: additive schema fields round-trip through the open meta bag.\n      ...(entry.meta ?? {}),\n    },\n  }\n}\n\n/** Map an edited lens document back to the redirect write contract. */\nexport function documentToSaveRedirect(doc: CmsDocument): SaveRedirectInput {\n  const values = doc.values ?? {}\n  // EC-311 Tier 2: any value keyed outside the canonical set comes from a mount's\n  // additive `nav.redirects({ fields })` override — persist it in the meta bag. The\n  // editor holds the complete additive set, so this is the whole bag (replace, not\n  // merge). Omit `meta` entirely for the default rail so its saves are unchanged.\n  const meta = metaBagProjection(values, CANONICAL_REDIRECT_FIELDS)\n  return {\n    id: doc.id,\n    from: typeof values.from === 'string' ? values.from : '',\n    to: typeof values.to === 'string' ? values.to : '',\n    permanent: typeof values.permanent === 'boolean' ? values.permanent : true,\n    enabled: typeof values.enabled === 'boolean' ? values.enabled : true,\n    ...(Object.keys(meta).length > 0 ? { meta } : {}),\n  }\n}\n\n/**\n * Assemble a {@link CollectionViewSource} for the **redirects rail** (EC-303) —\n * the portable list/edit surfaces over the editorial redirects store instead of\n * the CMS store. Redirects are CONTENT (an editor owns them), so unlike the users\n * rail this source allows `create`, is NOT admin-only, and needs no principal\n * field-access policy. No publish/versions/locales/inline/import — a redirect\n * is a small record saved explicitly (a saved+enabled one is live); bulk\n * delete rides the shared rail runner (EC-433).\n *\n * Must be mounted under a `RedirectsProvider` (for {@link useRedirects}).\n *\n * `schema` defaults to the engine-owned {@link redirectsCollectionDef}; a mount may\n * pass a customized def (EC-311 — built-in fields overridden by equal name via\n * `nav.redirects({ fields })`). The canonical `from`/`to`/`permanent`/`enabled`\n * names+types are contract-locked, so the projection helpers still read the same\n * canonical values; a mount's *additive* fields (Tier 2) round-trip through the\n * record's open `meta` bag ({@link documentToSaveRedirect}/{@link redirectToDocument}).\n *\n * The shared scaffold (`useRailViewSource`, EC-327) owns `viewState`/`lastError`\n * plumbing and the assembled source; this hook supplies only the redirects-store\n * reads/writes, the capability profile, and the registry-driven `validate`.\n */\nexport function useRedirectsCollectionViewSource(\n  projectId: string,\n  schema: CollectionDef = redirectsCollectionDef,\n): CollectionViewSource {\n  const store = useRedirects()\n  // EC-311: run the (possibly customized) schema's validation — required/pattern and\n  // custom `validate` fns on an overridden field must actually fire in the editor.\n  const registry = useMemo(() => createCollectionRegistry([schema]), [schema])\n\n  const documents = useCallback(() => store.redirects.map(redirectToDocument), [store.redirects])\n  const get = useCallback(\n    (ref: DocumentRef): CmsDocument | undefined => {\n      const record = store.get(ref.id)\n      return record ? redirectToDocument(record) : undefined\n    },\n    [store],\n  )\n  const titleOf = useCallback(\n    (ref: DocumentRef): string => store.get(ref.id)?.from || '(new redirect)',\n    [store],\n  )\n  const validate = useCallback(\n    (doc: CmsDocument) => validateDocument(registry, doc, { localeConfig: REDIRECTS_LOCALE_CONFIG }),\n    [registry],\n  )\n  const create = useCallback(\n    (): DocumentRef => ({ collection: redirectsCollectionDef.id, id: store.createDraft() }),\n    [store],\n  )\n  const save = useCallback((doc: CmsDocument) => store.save(documentToSaveRedirect(doc)), [store])\n  const remove = useCallback((ref: DocumentRef) => store.remove(ref.id), [store])\n\n  return useRailViewSource({\n    projectId,\n    schema,\n    capabilities: REDIRECT_COLLECTION_CAPABILITIES,\n    localeConfig: REDIRECTS_LOCALE_CONFIG,\n    documents,\n    get,\n    titleOf,\n    // No `referenceCandidates`/`collections` override: redirects carry no\n    // relation/asset fields, so nothing cross-collection to resolve (the\n    // factory's `() => []` / `[schema]` defaults apply).\n    detailPath: (id: string) => studioPath.redirect(id),\n    listPath: studioPath.redirects(),\n    validate,\n    create,\n    save,\n    remove,\n    normalizeSaveResult: normalizeOkResult,\n    normalizeRemoveResult: normalizeOkResult,\n  })\n}\n"]}

package/dist/components/users/users-collection-view-source.js

@@ -21,7 +21,7 @@ export const USER_COLLECTION_CAPABILITIES = {
     inlineEdit: false,
     create: false, // identities are minted by sign-up, never here
     remove: true, // revoke membership (does not delete the auth identity)
-    bulk: false,
+    bulk: true, // EC-433: bulk delete = the same per-id revoke, honestly reported
     liveUrl: false,
     hierarchy: false,
     importExport: false, // credential records are never dumped to raw JSON

package/dist/components/users/users-collection-view-source.js.map

@@ -1 +1 @@
-{"version":3,"file":"users-collection-view-source.js","sourceRoot":"","sources":["../../../src/components/users/users-collection-view-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAA;AAGnC,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAMrD,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAE7F,mFAAmF;AACnF,MAAM,YAAY,GAAW,IAAI,CAAA;AACjC,MAAM,mBAAmB,GAAiB,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,CAAA;AAE5F;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAA+B;IACtE,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,MAAM,EAAE,KAAK,EAAE,+CAA+C;IAC9D,MAAM,EAAE,IAAI,EAAE,wDAAwD;IACtE,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,KAAK;IACd,SAAS,EAAE,KAAK;IAChB,YAAY,EAAE,KAAK,EAAE,kDAAkD;IACvE,SAAS,EAAE,IAAI;CAChB,CAAA;AAED,uFAAuF;AACvF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;AAE1D,kFAAkF;AAClF,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,OAAO;QACL,UAAU,EAAE,kBAAkB,CAAC,EAAE;QACjC,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,MAAM,EAAE;YACN,yEAAyE;YACzE,iFAAiF;YACjF,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,EAAE;YAC9C,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,QAAQ;YACjC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;SACvB;KACF,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAe,EACf,MAA+B,EAC/B,aAAiC;IAEjC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,MAAM,EAAE,EAAE,KAAK,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA;IACvD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA;AAC/C,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,mBAAmB,CAAC,GAAgB;IAClD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAA;IAC/B,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IACvD,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAM,CAAC,IAAoB,CAAC,CAAC,CAAC,QAAQ,CAAA;IACtF,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;AACzF,CAAC;AAED;;mEAEmE;AACnE,SAAS,YAAY;IACnB,OAAO,EAAE,CAAA;AACX,CAAC;AAED;kDACkD;AAClD,SAAS,iBAAiB;IACxB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;AACrE,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,4BAA4B,CAAC,SAAiB;IAC5D,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAA;IACxB,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;IACtB,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAA;IAE5C,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;IACnF,MAAM,GAAG,GAAG,WAAW,CACrB,CAAC,GAAgB,EAA2B,EAAE;QAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAA;QACvD,OAAO,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACpD,CAAC,EACD,CAAC,KAAK,CAAC,KAAK,CAAC,CACd,CAAA;IACD,MAAM,OAAO,GAAG,WAAW,CACzB,CAAC,GAAgB,EAAU,EAAE;QAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAA;QACvD,OAAO,MAAM,EAAE,IAAI,IAAI,MAAM,EAAE,KAAK,IAAI,GAAG,CAAC,EAAE,CAAA;IAChD,CAAC,EACD,CAAC,KAAK,CAAC,KAAK,CAAC,CACd,CAAA;IACD,MAAM,WAAW,GAAG,WAAW,CAC7B,CAAC,KAAe,EAAE,MAAoB,EAAe,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,EACrG,CAAC,aAAa,CAAC,CAChB,CAAA;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IAC7F,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IAE/E,OAAO,iBAAiB,CAAC;QACvB,SAAS;QACT,MAAM,EAAE,kBAAkB;QAC1B,YAAY,EAAE,4BAA4B;QAC1C,YAAY,EAAE,mBAAmB;QACjC,SAAS;QACT,GAAG;QACH,OAAO;QACP,2EAA2E;QAC3E,4EAA4E;QAC5E,sEAAsE;QACtE,4EAA4E;QAC5E,4EAA4E;QAC5E,UAAU,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE;QAC5B,2EAA2E;QAC3E,yEAAyE;QACzE,WAAW;QACX,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,iBAAiB;QACzB,IAAI;QACJ,MAAM;QACN,mBAAmB,EAAE,iBAAiB;QACtC,qBAAqB,EAAE,iBAAiB;KACzC,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { useCallback } from 'react'\nimport type { CmsDocument, CmsValidationIssue, DocumentRef, FieldDef, Locale, LocaleConfig } from '@elytracms/core/cms-core'\nimport type { ProjectRole, SaveUserInput, UserRecord } from '@elytracms/core/persistence'\nimport { studioPath } from '@elytracms/studio/router'\nimport type {\n  CollectionViewCapabilities,\n  CollectionViewSource,\n  FieldAccess,\n} from '@elytracms/studio/lib/collection-view/collection-view-source'\nimport { useAuth } from '../auth-context'\nimport { useUsers } from './users-store'\nimport { usersCollectionDef } from './users-schema'\nimport { metaBagProjection, normalizeOkResult, useRailViewSource } from '../rail-view-source'\n\n/** The users rail is not localized — one implicit locale keeps the lens honest. */\nconst USERS_LOCALE: Locale = 'en'\nconst USERS_LOCALE_CONFIG: LocaleConfig = { default: USERS_LOCALE, locales: [USERS_LOCALE] }\n\n/**\n * The capability profile of the users rail (EC-240): admin-only, no\n * publish/versions/create/import (identities are minted by sign-up and their\n * bytes are auth-owned), remove allowed (revoke membership). Hoisted to a\n * module-level constant (no prop/state dependency, EC-327) — mirrors\n * `ASSET_COLLECTION_CAPABILITIES`.\n */\nexport const USER_COLLECTION_CAPABILITIES: CollectionViewCapabilities = {\n  publish: false,\n  versions: false,\n  locales: false,\n  inlineEdit: false,\n  create: false, // identities are minted by sign-up, never here\n  remove: true, // revoke membership (does not delete the auth identity)\n  bulk: false,\n  liveUrl: false,\n  hierarchy: false,\n  importExport: false, // credential records are never dumped to raw JSON\n  adminOnly: true,\n}\n\n/** The built-in field names — everything else in `values` is a custom `meta` field. */\nconst IDENTITY_FIELDS = new Set(['name', 'email', 'role'])\n\n/** Project the auth-identity + membership join into the lens's `values` shape. */\nexport function userToDocument(record: UserRecord): CmsDocument {\n  return {\n    collection: usersCollectionDef.id,\n    id: record.id,\n    values: {\n      // Display title falls through empties (name → email → id) so a nameless,\n      // blank-email member never renders as a blank row; `email` keeps its real value.\n      name: record.name || record.email || record.id,\n      email: record.email,\n      role: record.roles[0] ?? 'viewer',\n      ...(record.meta ?? {}),\n    },\n  }\n}\n\n/**\n * Principal-based field access for the users rail (EC-240, AD-18). `role` is\n * authority: **read-only when you are editing YOURSELF** — you don't change your\n * own role (the server integrity floor also guards it) — and **editable otherwise**\n * (the rail is admin-only, so a non-self editor is an admin acting on someone else).\n * Identity fields (name/email) follow their schema `form.readOnly`; everything else\n * is editable. Pure, so the self/other rule is unit-testable without the auth hook.\n */\nexport function userFieldAccess(\n  field: FieldDef,\n  record: CmsDocument | undefined,\n  currentUserId: string | undefined,\n): FieldAccess {\n  if (field.name === 'role') {\n    return record?.id === currentUserId ? 'read' : 'edit'\n  }\n  return field.form?.readOnly ? 'read' : 'edit'\n}\n\n/** Map an edited lens document back to the write contract (role + custom `meta`). */\nexport function documentToSaveInput(doc: CmsDocument): SaveUserInput {\n  const values = doc.values ?? {}\n  const meta = metaBagProjection(values, IDENTITY_FIELDS)\n  const role = typeof values.role === 'string' ? (values.role as ProjectRole) : 'viewer'\n  return { id: doc.id, roles: [role], ...(Object.keys(meta).length > 0 ? { meta } : {}) }\n}\n\n/** `validate` for the users rail: no-op — a member's identity fields aren't\n *  schema-validated the way CMS documents are (240a-era; a registry-driven\n *  validation may land alongside a future custom-field schema). */\nfunction noValidation(): CmsValidationIssue[] {\n  return []\n}\n\n/** `create` when `capabilities.create === false` — never reached (identities\n *  are minted by sign-up, not the users rail). */\nfunction createUnsupported(): DocumentRef {\n  throw new Error('users are created by sign-up, not the users rail')\n}\n\n/**\n * Assemble a {@link CollectionViewSource} for the **users rail** (EC-240, AD-19) —\n * the reuse proof that the portable list/edit surfaces serve a non-`cmsDocuments`\n * rail. Mirrors {@link useCmsCollectionViewSource}, over the users store instead of\n * the CMS store, with the users capability profile: admin-only, no\n * publish/versions/create/import (identities are minted by sign-up and their bytes\n * are auth-owned), remove allowed (revoke membership). Identity fields are\n * read-only; an admin edits a member's role (and future custom `meta` fields).\n *\n * Must be mounted under a `UsersProvider` (for {@link useUsers}).\n *\n * The shared scaffold (`useRailViewSource`, EC-327) owns `viewState`/`lastError`\n * plumbing and the assembled source; this hook supplies only the users-store\n * reads/writes, the capability profile, and the principal-based `fieldAccess`.\n */\nexport function useUsersCollectionViewSource(projectId: string): CollectionViewSource {\n  const users = useUsers()\n  // The signed-in principal — so `role` locks to read-only when an admin opens\n  // their OWN record (self ≠ other; the server floor enforces it regardless).\n  const auth = useAuth()\n  const currentUserId = auth.session?.user?.id\n\n  const documents = useCallback(() => users.users.map(userToDocument), [users.users])\n  const get = useCallback(\n    (ref: DocumentRef): CmsDocument | undefined => {\n      const record = users.users.find((u) => u.id === ref.id)\n      return record ? userToDocument(record) : undefined\n    },\n    [users.users],\n  )\n  const titleOf = useCallback(\n    (ref: DocumentRef): string => {\n      const record = users.users.find((u) => u.id === ref.id)\n      return record?.name || record?.email || ref.id\n    },\n    [users.users],\n  )\n  const fieldAccess = useCallback(\n    (field: FieldDef, record?: CmsDocument): FieldAccess => userFieldAccess(field, record, currentUserId),\n    [currentUserId],\n  )\n  const save = useCallback((doc: CmsDocument) => users.save(documentToSaveInput(doc)), [users])\n  const remove = useCallback((ref: DocumentRef) => users.remove(ref.id), [users])\n\n  return useRailViewSource({\n    projectId,\n    schema: usersCollectionDef,\n    capabilities: USER_COLLECTION_CAPABILITIES,\n    localeConfig: USERS_LOCALE_CONFIG,\n    documents,\n    get,\n    titleOf,\n    // No `referenceCandidates`/`collections` override: users carry no relation\n    // fields in v1, so there are no cross-collection candidates to resolve; the\n    // lens is the only collection in scope (both factory defaults apply).\n    // The users rail now has a per-member detail surface (EC-240): rows link to\n    // it, and the edit shell's back-crumb / post-delete nav return to the list.\n    detailPath: (id: string) => studioPath.user(id),\n    listPath: studioPath.users(),\n    // Principal-based tri-state: `role` is read-only for self, editable for an\n    // admin acting on another; identity fields follow their schema readOnly.\n    fieldAccess,\n    validate: noValidation,\n    create: createUnsupported,\n    save,\n    remove,\n    normalizeSaveResult: normalizeOkResult,\n    normalizeRemoveResult: normalizeOkResult,\n  })\n}\n"]}
+{"version":3,"file":"users-collection-view-source.js","sourceRoot":"","sources":["../../../src/components/users/users-collection-view-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAA;AAGnC,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAMrD,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAE7F,mFAAmF;AACnF,MAAM,YAAY,GAAW,IAAI,CAAA;AACjC,MAAM,mBAAmB,GAAiB,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,CAAA;AAE5F;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAA+B;IACtE,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,MAAM,EAAE,KAAK,EAAE,+CAA+C;IAC9D,MAAM,EAAE,IAAI,EAAE,wDAAwD;IACtE,IAAI,EAAE,IAAI,EAAE,kEAAkE;IAC9E,OAAO,EAAE,KAAK;IACd,SAAS,EAAE,KAAK;IAChB,YAAY,EAAE,KAAK,EAAE,kDAAkD;IACvE,SAAS,EAAE,IAAI;CAChB,CAAA;AAED,uFAAuF;AACvF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;AAE1D,kFAAkF;AAClF,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,OAAO;QACL,UAAU,EAAE,kBAAkB,CAAC,EAAE;QACjC,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,MAAM,EAAE;YACN,yEAAyE;YACzE,iFAAiF;YACjF,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,EAAE;YAC9C,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,QAAQ;YACjC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;SACvB;KACF,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAe,EACf,MAA+B,EAC/B,aAAiC;IAEjC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,MAAM,EAAE,EAAE,KAAK,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA;IACvD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA;AAC/C,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,mBAAmB,CAAC,GAAgB;IAClD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAA;IAC/B,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IACvD,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAM,CAAC,IAAoB,CAAC,CAAC,CAAC,QAAQ,CAAA;IACtF,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;AACzF,CAAC;AAED;;mEAEmE;AACnE,SAAS,YAAY;IACnB,OAAO,EAAE,CAAA;AACX,CAAC;AAED;kDACkD;AAClD,SAAS,iBAAiB;IACxB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;AACrE,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,4BAA4B,CAAC,SAAiB;IAC5D,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAA;IACxB,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;IACtB,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAA;IAE5C,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;IACnF,MAAM,GAAG,GAAG,WAAW,CACrB,CAAC,GAAgB,EAA2B,EAAE;QAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAA;QACvD,OAAO,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACpD,CAAC,EACD,CAAC,KAAK,CAAC,KAAK,CAAC,CACd,CAAA;IACD,MAAM,OAAO,GAAG,WAAW,CACzB,CAAC,GAAgB,EAAU,EAAE;QAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAA;QACvD,OAAO,MAAM,EAAE,IAAI,IAAI,MAAM,EAAE,KAAK,IAAI,GAAG,CAAC,EAAE,CAAA;IAChD,CAAC,EACD,CAAC,KAAK,CAAC,KAAK,CAAC,CACd,CAAA;IACD,MAAM,WAAW,GAAG,WAAW,CAC7B,CAAC,KAAe,EAAE,MAAoB,EAAe,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,EACrG,CAAC,aAAa,CAAC,CAChB,CAAA;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IAC7F,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IAE/E,OAAO,iBAAiB,CAAC;QACvB,SAAS;QACT,MAAM,EAAE,kBAAkB;QAC1B,YAAY,EAAE,4BAA4B;QAC1C,YAAY,EAAE,mBAAmB;QACjC,SAAS;QACT,GAAG;QACH,OAAO;QACP,2EAA2E;QAC3E,4EAA4E;QAC5E,sEAAsE;QACtE,4EAA4E;QAC5E,4EAA4E;QAC5E,UAAU,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE;QAC5B,2EAA2E;QAC3E,yEAAyE;QACzE,WAAW;QACX,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,iBAAiB;QACzB,IAAI;QACJ,MAAM;QACN,mBAAmB,EAAE,iBAAiB;QACtC,qBAAqB,EAAE,iBAAiB;KACzC,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { useCallback } from 'react'\nimport type { CmsDocument, CmsValidationIssue, DocumentRef, FieldDef, Locale, LocaleConfig } from '@elytracms/core/cms-core'\nimport type { ProjectRole, SaveUserInput, UserRecord } from '@elytracms/core/persistence'\nimport { studioPath } from '@elytracms/studio/router'\nimport type {\n  CollectionViewCapabilities,\n  CollectionViewSource,\n  FieldAccess,\n} from '@elytracms/studio/lib/collection-view/collection-view-source'\nimport { useAuth } from '../auth-context'\nimport { useUsers } from './users-store'\nimport { usersCollectionDef } from './users-schema'\nimport { metaBagProjection, normalizeOkResult, useRailViewSource } from '../rail-view-source'\n\n/** The users rail is not localized — one implicit locale keeps the lens honest. */\nconst USERS_LOCALE: Locale = 'en'\nconst USERS_LOCALE_CONFIG: LocaleConfig = { default: USERS_LOCALE, locales: [USERS_LOCALE] }\n\n/**\n * The capability profile of the users rail (EC-240): admin-only, no\n * publish/versions/create/import (identities are minted by sign-up and their\n * bytes are auth-owned), remove allowed (revoke membership). Hoisted to a\n * module-level constant (no prop/state dependency, EC-327) — mirrors\n * `ASSET_COLLECTION_CAPABILITIES`.\n */\nexport const USER_COLLECTION_CAPABILITIES: CollectionViewCapabilities = {\n  publish: false,\n  versions: false,\n  locales: false,\n  inlineEdit: false,\n  create: false, // identities are minted by sign-up, never here\n  remove: true, // revoke membership (does not delete the auth identity)\n  bulk: true, // EC-433: bulk delete = the same per-id revoke, honestly reported\n  liveUrl: false,\n  hierarchy: false,\n  importExport: false, // credential records are never dumped to raw JSON\n  adminOnly: true,\n}\n\n/** The built-in field names — everything else in `values` is a custom `meta` field. */\nconst IDENTITY_FIELDS = new Set(['name', 'email', 'role'])\n\n/** Project the auth-identity + membership join into the lens's `values` shape. */\nexport function userToDocument(record: UserRecord): CmsDocument {\n  return {\n    collection: usersCollectionDef.id,\n    id: record.id,\n    values: {\n      // Display title falls through empties (name → email → id) so a nameless,\n      // blank-email member never renders as a blank row; `email` keeps its real value.\n      name: record.name || record.email || record.id,\n      email: record.email,\n      role: record.roles[0] ?? 'viewer',\n      ...(record.meta ?? {}),\n    },\n  }\n}\n\n/**\n * Principal-based field access for the users rail (EC-240, AD-18). `role` is\n * authority: **read-only when you are editing YOURSELF** — you don't change your\n * own role (the server integrity floor also guards it) — and **editable otherwise**\n * (the rail is admin-only, so a non-self editor is an admin acting on someone else).\n * Identity fields (name/email) follow their schema `form.readOnly`; everything else\n * is editable. Pure, so the self/other rule is unit-testable without the auth hook.\n */\nexport function userFieldAccess(\n  field: FieldDef,\n  record: CmsDocument | undefined,\n  currentUserId: string | undefined,\n): FieldAccess {\n  if (field.name === 'role') {\n    return record?.id === currentUserId ? 'read' : 'edit'\n  }\n  return field.form?.readOnly ? 'read' : 'edit'\n}\n\n/** Map an edited lens document back to the write contract (role + custom `meta`). */\nexport function documentToSaveInput(doc: CmsDocument): SaveUserInput {\n  const values = doc.values ?? {}\n  const meta = metaBagProjection(values, IDENTITY_FIELDS)\n  const role = typeof values.role === 'string' ? (values.role as ProjectRole) : 'viewer'\n  return { id: doc.id, roles: [role], ...(Object.keys(meta).length > 0 ? { meta } : {}) }\n}\n\n/** `validate` for the users rail: no-op — a member's identity fields aren't\n *  schema-validated the way CMS documents are (240a-era; a registry-driven\n *  validation may land alongside a future custom-field schema). */\nfunction noValidation(): CmsValidationIssue[] {\n  return []\n}\n\n/** `create` when `capabilities.create === false` — never reached (identities\n *  are minted by sign-up, not the users rail). */\nfunction createUnsupported(): DocumentRef {\n  throw new Error('users are created by sign-up, not the users rail')\n}\n\n/**\n * Assemble a {@link CollectionViewSource} for the **users rail** (EC-240, AD-19) —\n * the reuse proof that the portable list/edit surfaces serve a non-`cmsDocuments`\n * rail. Mirrors {@link useCmsCollectionViewSource}, over the users store instead of\n * the CMS store, with the users capability profile: admin-only, no\n * publish/versions/create/import (identities are minted by sign-up and their bytes\n * are auth-owned), remove allowed (revoke membership). Identity fields are\n * read-only; an admin edits a member's role (and future custom `meta` fields).\n *\n * Must be mounted under a `UsersProvider` (for {@link useUsers}).\n *\n * The shared scaffold (`useRailViewSource`, EC-327) owns `viewState`/`lastError`\n * plumbing and the assembled source; this hook supplies only the users-store\n * reads/writes, the capability profile, and the principal-based `fieldAccess`.\n */\nexport function useUsersCollectionViewSource(projectId: string): CollectionViewSource {\n  const users = useUsers()\n  // The signed-in principal — so `role` locks to read-only when an admin opens\n  // their OWN record (self ≠ other; the server floor enforces it regardless).\n  const auth = useAuth()\n  const currentUserId = auth.session?.user?.id\n\n  const documents = useCallback(() => users.users.map(userToDocument), [users.users])\n  const get = useCallback(\n    (ref: DocumentRef): CmsDocument | undefined => {\n      const record = users.users.find((u) => u.id === ref.id)\n      return record ? userToDocument(record) : undefined\n    },\n    [users.users],\n  )\n  const titleOf = useCallback(\n    (ref: DocumentRef): string => {\n      const record = users.users.find((u) => u.id === ref.id)\n      return record?.name || record?.email || ref.id\n    },\n    [users.users],\n  )\n  const fieldAccess = useCallback(\n    (field: FieldDef, record?: CmsDocument): FieldAccess => userFieldAccess(field, record, currentUserId),\n    [currentUserId],\n  )\n  const save = useCallback((doc: CmsDocument) => users.save(documentToSaveInput(doc)), [users])\n  const remove = useCallback((ref: DocumentRef) => users.remove(ref.id), [users])\n\n  return useRailViewSource({\n    projectId,\n    schema: usersCollectionDef,\n    capabilities: USER_COLLECTION_CAPABILITIES,\n    localeConfig: USERS_LOCALE_CONFIG,\n    documents,\n    get,\n    titleOf,\n    // No `referenceCandidates`/`collections` override: users carry no relation\n    // fields in v1, so there are no cross-collection candidates to resolve; the\n    // lens is the only collection in scope (both factory defaults apply).\n    // The users rail now has a per-member detail surface (EC-240): rows link to\n    // it, and the edit shell's back-crumb / post-delete nav return to the list.\n    detailPath: (id: string) => studioPath.user(id),\n    listPath: studioPath.users(),\n    // Principal-based tri-state: `role` is read-only for self, editable for an\n    // admin acting on another; identity fields follow their schema readOnly.\n    fieldAccess,\n    validate: noValidation,\n    create: createUnsupported,\n    save,\n    remove,\n    normalizeSaveResult: normalizeOkResult,\n    normalizeRemoveResult: normalizeOkResult,\n  })\n}\n"]}

package/dist/lib/collection-view/collection-view-source.d.ts

@@ -1,6 +1,7 @@
 import type { CmsDocument, CollectionDef, DocumentRef, DocumentUrl, FieldDef, Locale, LocaleConfig, LocalizedString, RestoreScope } from '@elytracms/core/cms-core';
 import type { CmsValidationIssue } from '@elytracms/core/cms-core';
 import type { OperationError } from '@elytracms/core/operations';
+import type { ReferenceTarget } from '@elytracms/core/persistence';
 import type { TableViewState } from '../cms-views/view-model.js';
 import type { CellCommitInput, CellCommitOutcome } from '../../components/cms/cell-edit.js';
 import type { BulkAction, BulkReport, BulkSetField } from '../../components/cms/bulk-actions.js';
@@ -96,6 +97,17 @@ export interface CollectionViewSource {
      * via {@link titleOf}, matching today's "no AssetsProvider" behaviour).
      */
     resolveAsset?(id: string): ResolvedAsset | undefined;
+    /**
+     * How this rail's records are addressed in the EC-155 reference index — the
+     * target shape the delete/unpublish confirmation's inbound pre-flight queries
+     * (EC-433). Absent ⇒ the document shape (`{ type: 'document', id: 'collection:id' }`),
+     * which every `cmsDocuments` collection uses. The assets rail supplies
+     * `{ type: 'asset' }` so its list/bulk delete confirmation enumerates the SAME
+     * inbound references its detail surface does — a document-shaped lookup would
+     * report a referenced asset as "not referenced" (the EC-319 objection that
+     * originally kept `remove` off the assets rail).
+     */
+    referenceTarget?(ref: DocumentRef): ReferenceTarget;
     /** The last failed/denied mutation, surfaced by the shell (never a silent failure). */
     readonly lastError: OperationError | null;
     clearLastError(): void;

package/dist/lib/collection-view/collection-view-source.js.map

@@ -1 +1 @@
-{"version":3,"file":"collection-view-source.js","sourceRoot":"","sources":["../../../src/lib/collection-view/collection-view-source.ts"],"names":[],"mappings":"AAmNA;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA4B,EAC5B,KAAe,EACf,MAAoB;IAEpB,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;AACjG,CAAC","sourcesContent":["import type {\n  CmsDocument,\n  CollectionDef,\n  DocumentRef,\n  DocumentUrl,\n  FieldDef,\n  Locale,\n  LocaleConfig,\n  LocalizedString,\n  RestoreScope,\n} from '@elytracms/core/cms-core'\nimport type { CmsValidationIssue } from '@elytracms/core/cms-core'\nimport type { OperationError } from '@elytracms/core/operations'\nimport type { TableViewState } from '../cms-views/view-model'\n// The concrete inline-edit + bulk vocabulary (Stream A relocates it into `lib` as it settles).\nimport type { CellCommitInput, CellCommitOutcome } from '../../components/cms/cell-edit'\nimport type { BulkAction, BulkReport, BulkSetField } from '../../components/cms/bulk-actions'\nimport type { DocumentVersionsView, ImportReport } from '../../components/cms/cms-store'\n\n/**\n * `CollectionViewSource` — the studio's UNIVERSAL interaction seam (EC-240,\n * vision AD-19).\n *\n * The list surface (`CollectionTable`) and the edit-shell (`DetailEditor`) are\n * the studio's universal interaction surfaces. Historically they read the\n * concrete `CmsStore` through `useCms()`, so they only served `cmsDocuments`.\n * This interface is the data-agnostic seam they render over instead, so the SAME\n * surfaces drive the users rail (EC-240), redirects (EC-303), the Components app\n * edit-shell, and any future rail — no hand-rolled UI per rail.\n *\n * **Shape:** the source is scoped to ONE collection (it carries `schema` +\n * `collectionId`), and its methods mirror the subset of `CmsStore` the surfaces\n * actually use — dropping the `collectionId` argument (the source already knows\n * it). Keeping the names/signatures aligned makes the CMS adapter a\n * behaviour-preserving pass-through and the migration near-mechanical.\n *\n * **Referential stability:** the surfaces put `documents`, `isPublished`,\n * `localeConfig`, etc. in `useMemo` dependency arrays. An implementation MUST\n * return stable references across renders (delegate to the underlying store's\n * already-stable methods; never wrap in a fresh closure each render) or memos\n * bust and the inline-edit order snapshot / perf regress.\n *\n * **Capabilities:** flags gate whole shell regions AND method presence — a source\n * with `capabilities.versions === false` (the users rail) never mounts the\n * Versions pane, so no `listVersions` read fires on credential records. Optional\n * method groups are present iff the flag is set.\n */\nexport interface CollectionViewSource {\n  /** The rail/collection this source serves. */\n  readonly collectionId: string\n  /** The schema lens: fields, form tabs/groups, `titleField`, display nouns. */\n  readonly schema: CollectionDef\n  /** Which regions/methods this source supports. */\n  readonly capabilities: CollectionViewCapabilities\n\n  /** The project scope (asset picker, published-pool queries). Absent in fixture sessions. */\n  readonly projectId?: string\n  /**\n   * The collection id assets live in (for a cell/field's `titleOf` label fallback\n   * when {@link resolveAsset} finds no record). Present only for sources that\n   * reference assets — a rail without assets (users) omits it.\n   */\n  readonly assetCollectionId?: string\n  /** The ambient locale lens (only meaningful when `capabilities.locales`). */\n  readonly localeConfig: LocaleConfig\n  readonly activeLocale: Locale\n\n  // --- Reads -----------------------------------------------------------------\n  /** The full row set (view mechanics filter/sort this client-side). */\n  documents(): CmsDocument[]\n  get(ref: DocumentRef): CmsDocument | undefined\n  /** A relation/asset target's display title (hides the string-vs-function `titleField`). */\n  titleOf(ref: DocumentRef): string\n  /**\n   * List the candidate records of a relation field's declared `target` collection\n   * — the pick-list for a relation picker (EC-072). References are first-class and\n   * collection-based: the field's schema declares which collection(s) it targets,\n   * and this resolves those rows for ANY target (cross-collection), not just this\n   * source's own collection. The caller passes `field.target`; a multi-target field\n   * (future) merges one call per declared target. An unknown/empty target yields `[]`.\n   */\n  referenceCandidates(collectionId: string): CmsDocument[]\n  /**\n   * The workspace schema a reference/asset can point at — the schema counterpart to\n   * {@link referenceCandidates}. Needed for the cases that read a TARGET collection's\n   * fields (an asset field editing the asset collection's own metadata; the reuse\n   * capability correlating embed manifests against their target collection). A\n   * reference is collection-based, so resolving one sometimes needs the target's\n   * schema, not just its rows.\n   */\n  readonly collections: readonly CollectionDef[]\n  isFieldReadOnly(field: FieldDef): boolean\n  /**\n   * Principal-based field access (EC-240, vision AD-18): `edit` (writable), `read`\n   * (visible but read-only), or `hidden` (not rendered for this principal). This is\n   * IDENTITY-driven and distinct from a field's content-conditional `hidden(values)`\n   * — e.g. an editor's own `role` resolves to `read`, a viewer never SEES a\n   * sensitive field (`hidden`). A single tri-state (never two independent flags) so\n   * the nonsensical writable-but-invisible state can't be expressed. Optional:\n   * absent ⇒ derived from {@link isFieldReadOnly} (`read`|`edit`), i.e. default-open\n   * (permissions RESTRICT, never grant a baseline). Per-rail policy lives on the\n   * source; the starter's policy flows into its construction (engine = mechanism).\n   * Prefer {@link resolveFieldAccess} over calling this directly (it applies the\n   * default-open fallback).\n   */\n  fieldAccess?(field: FieldDef, record?: CmsDocument): FieldAccess\n  validate(doc: CmsDocument): CmsValidationIssue[]\n  /**\n   * Resolve an asset id to its display metadata for a cell/field, or `undefined`\n   * when there is no asset backend (a source without assets degrades to a label\n   * via {@link titleOf}, matching today's \"no AssetsProvider\" behaviour).\n   */\n  resolveAsset?(id: string): ResolvedAsset | undefined\n  /** The last failed/denied mutation, surfaced by the shell (never a silent failure). */\n  readonly lastError: OperationError | null\n  clearLastError(): void\n  /**\n   * Land any queued/optimistic writes so a subsequent pre-flight READ sees them\n   * (the reference index is maintained on write). A source with no async\n   * persistence omits it — its reads are already authoritative.\n   */\n  flush?(): Promise<void>\n\n  /**\n   * The studio route splat for a record's detail surface (the row link + the\n   * post-create navigation target), e.g. `studioPath.cmsDocument(collectionId, id)`.\n   * Rail-owned so the list never hard-codes the CMS route. `undefined` ⇒ the rail\n   * has no detail surface, so rows render as plain text (no navigation).\n   */\n  detailPath?(id: string): string\n  /**\n   * The studio route splat for this rail's LIST surface — the edit shell's\n   * \"back to list\" breadcrumb crumb and its post-delete navigation target, e.g.\n   * `studioPath.cmsCollection(collectionId)`. Rail-owned so the edit shell never\n   * hard-codes the CMS route (the counterpart to {@link detailPath}). `undefined`\n   * ⇒ the crumb is unlinked and delete falls back to the project index.\n   */\n  readonly listPath?: string\n\n  // --- View state (list) -----------------------------------------------------\n  viewState(): TableViewState\n  setViewState(update: TableViewState | ((prev: TableViewState) => TableViewState)): void\n\n  // --- Writes ----------------------------------------------------------------\n  create(): DocumentRef\n  save(doc: CmsDocument): void\n  remove(ref: DocumentRef): void\n  /**\n   * Bulk publish/unpublish/delete/set-field (only when `capabilities.bulk`): one\n   * command PER item, per-item outcomes enumerated in the report (partial failure\n   * is never silent).\n   */\n  bulk?(ids: readonly string[], action: BulkAction, setField?: BulkSetField): Promise<BulkReport>\n\n  // --- Capability method groups (present iff the matching flag is set) --------\n  /** `publish` — published-pool predicate + publish/unpublish. */\n  readonly publishing?: PublishingCapability\n  /** `versions` — version history + restore. */\n  readonly versioning?: VersioningCapability\n  /** `inlineEdit` — the list's single-command optimistic cell write. */\n  readonly inlineEditing?: InlineEditCapability\n  /**\n   * Config-as-code named lenses (EC-246b) the header view selector switches\n   * between. Optional: a source that declares no named views (a non-CMS rail\n   * like users) omits it, and the selector renders nothing (single default).\n   */\n  readonly views?: NamedViewsCapability\n  /**\n   * `importExport` — JSON round-trip of the collection's records. CMS-specific;\n   * a rail whose records are credential-bearing (users) omits it, so neither the\n   * import dialog nor the export action mounts (identities aren't dumped to JSON).\n   */\n  readonly imports?: ImportCapability\n}\n\n/**\n * The capability matrix. Each flag gates a shell region AND the presence of its\n * method group. The **users rail** (EC-240) sets `publish:false`, `versions:false`\n * (credential caution), `create:false` (identity minted by sign-up), and no\n * `liveUrl`/`hierarchy`.\n */\nexport interface CollectionViewCapabilities {\n  readonly publish: boolean\n  readonly versions: boolean\n  readonly locales: boolean\n  readonly inlineEdit: boolean\n  readonly create: boolean\n  readonly remove: boolean\n  readonly bulk: boolean\n  /** The derived live-URL column (published pool × deployment routes). */\n  readonly liveUrl: boolean\n  /** Parent-self-relation tree mode (hierarchical collections only). */\n  readonly hierarchy: boolean\n  /** JSON import/export of the collection's records (off for credential rails). */\n  readonly importExport: boolean\n  /**\n   * The rail is administration-scoped (mirrors `ADMIN_ONLY_OPERATIONS`). The\n   * nav-permission layer reads this to gate the rail item. Absent ⇒ not admin-only.\n   */\n  readonly adminOnly?: boolean\n}\n\n/**\n * Principal-based field access (EC-240, AD-18). One tri-state drives BOTH visibility\n * and writability: `edit` (writable), `read` (visible, read-only), `hidden` (not\n * rendered). Default `edit` (default-open). Distinct from content-`hidden(values)`;\n * they compose — a field shows iff *not content-hidden AND access ≠ hidden*, and is\n * editable iff *access = edit AND not otherwise read-only* (published view, `form.readOnly`).\n */\nexport type FieldAccess = 'edit' | 'read' | 'hidden'\n\n/**\n * Resolve a field's effective principal access for a source — its {@link\n * CollectionViewSource.fieldAccess} policy when present, else derived from the\n * boolean `isFieldReadOnly` (default-open). The one place the shell asks \"may this\n * principal edit / see this field?\", so the default-open fallback lives in one spot.\n */\nexport function resolveFieldAccess(\n  source: CollectionViewSource,\n  field: FieldDef,\n  record?: CmsDocument,\n): FieldAccess {\n  return source.fieldAccess?.(field, record) ?? (source.isFieldReadOnly(field) ? 'read' : 'edit')\n}\n\n/** Asset display metadata a cell/field renders (thumbnail or labelled badge). */\nexport interface ResolvedAsset {\n  readonly url?: string\n  readonly contentType?: string\n  readonly title?: string\n  readonly filename?: string\n  readonly alt?: string\n}\n\n/** `publish` capability. */\nexport interface PublishingCapability {\n  /** Published-ness from the version pointer (NOT a row field). */\n  isPublished(ref: DocumentRef): boolean\n  publish(ref: DocumentRef): Promise<void>\n  unpublish(ref: DocumentRef): Promise<void>\n  /**\n   * Live URLs for the routable documents, keyed by id — derived from the\n   * PUBLISHED pool (never draft rows) so an unpublished slug/parent edit can't\n   * leak into a live link (EC-205/EC-216). `null` when the collection is not\n   * routable → the live-URL column is hidden. Only present when `capabilities.liveUrl`.\n   */\n  liveUrls?(): Map<string, DocumentUrl> | null\n}\n\n/** `versions` capability. */\nexport interface VersioningCapability {\n  restore(ref: DocumentRef, version: number, scope?: RestoreScope): Promise<CmsDocument | null>\n  /**\n   * The document's recorded version history + live pin. Folds the flush-before-read\n   * ordering INTO the loader (the adapter's concern), so every fetch lists an\n   * authoritative history regardless of which surface triggered the change (EC-224).\n   */\n  load(ref: DocumentRef): Promise<DocumentVersionsView>\n}\n\n/** `inlineEdit` capability: the list's single-command optimistic cell write (EC-168). */\nexport interface InlineEditCapability {\n  commitField(input: CellCommitInput): Promise<CellCommitOutcome>\n}\n\n/** A named lens the header selector offers — id + display name only (the header never needs its state). */\nexport interface NamedView {\n  readonly id: string\n  /** Display name; a {@link LocalizedString} (EC-343), resolved at the render site like `form.label`. */\n  readonly name: LocalizedString\n}\n\n/** `importExport` capability: validate + fold external JSON records into the collection (EC-079). */\nexport interface ImportCapability {\n  importDocuments(items: unknown[]): ImportReport\n}\n\n/**\n * `views` capability: config-as-code named lenses (EC-246b). The header selector\n * only *picks* a lens — it never creates/edits/deletes one (shared views are code).\n */\nexport interface NamedViewsCapability {\n  /** The built-in default + config-declared named views. */\n  list(): readonly NamedView[]\n  /** The currently-selected view id. */\n  activeId(): string\n  /** Switch views (resets the working table state to the view's baseline). */\n  setActive(id: string): void\n}\n\nexport type { CellCommitInput, CellCommitOutcome, ImportReport }\n"]}
+{"version":3,"file":"collection-view-source.js","sourceRoot":"","sources":["../../../src/lib/collection-view/collection-view-source.ts"],"names":[],"mappings":"AA+NA;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA4B,EAC5B,KAAe,EACf,MAAoB;IAEpB,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;AACjG,CAAC","sourcesContent":["import type {\n  CmsDocument,\n  CollectionDef,\n  DocumentRef,\n  DocumentUrl,\n  FieldDef,\n  Locale,\n  LocaleConfig,\n  LocalizedString,\n  RestoreScope,\n} from '@elytracms/core/cms-core'\nimport type { CmsValidationIssue } from '@elytracms/core/cms-core'\nimport type { OperationError } from '@elytracms/core/operations'\nimport type { ReferenceTarget } from '@elytracms/core/persistence'\nimport type { TableViewState } from '../cms-views/view-model'\n// The concrete inline-edit + bulk vocabulary (Stream A relocates it into `lib` as it settles).\nimport type { CellCommitInput, CellCommitOutcome } from '../../components/cms/cell-edit'\nimport type { BulkAction, BulkReport, BulkSetField } from '../../components/cms/bulk-actions'\nimport type { DocumentVersionsView, ImportReport } from '../../components/cms/cms-store'\n\n/**\n * `CollectionViewSource` — the studio's UNIVERSAL interaction seam (EC-240,\n * vision AD-19).\n *\n * The list surface (`CollectionTable`) and the edit-shell (`DetailEditor`) are\n * the studio's universal interaction surfaces. Historically they read the\n * concrete `CmsStore` through `useCms()`, so they only served `cmsDocuments`.\n * This interface is the data-agnostic seam they render over instead, so the SAME\n * surfaces drive the users rail (EC-240), redirects (EC-303), the Components app\n * edit-shell, and any future rail — no hand-rolled UI per rail.\n *\n * **Shape:** the source is scoped to ONE collection (it carries `schema` +\n * `collectionId`), and its methods mirror the subset of `CmsStore` the surfaces\n * actually use — dropping the `collectionId` argument (the source already knows\n * it). Keeping the names/signatures aligned makes the CMS adapter a\n * behaviour-preserving pass-through and the migration near-mechanical.\n *\n * **Referential stability:** the surfaces put `documents`, `isPublished`,\n * `localeConfig`, etc. in `useMemo` dependency arrays. An implementation MUST\n * return stable references across renders (delegate to the underlying store's\n * already-stable methods; never wrap in a fresh closure each render) or memos\n * bust and the inline-edit order snapshot / perf regress.\n *\n * **Capabilities:** flags gate whole shell regions AND method presence — a source\n * with `capabilities.versions === false` (the users rail) never mounts the\n * Versions pane, so no `listVersions` read fires on credential records. Optional\n * method groups are present iff the flag is set.\n */\nexport interface CollectionViewSource {\n  /** The rail/collection this source serves. */\n  readonly collectionId: string\n  /** The schema lens: fields, form tabs/groups, `titleField`, display nouns. */\n  readonly schema: CollectionDef\n  /** Which regions/methods this source supports. */\n  readonly capabilities: CollectionViewCapabilities\n\n  /** The project scope (asset picker, published-pool queries). Absent in fixture sessions. */\n  readonly projectId?: string\n  /**\n   * The collection id assets live in (for a cell/field's `titleOf` label fallback\n   * when {@link resolveAsset} finds no record). Present only for sources that\n   * reference assets — a rail without assets (users) omits it.\n   */\n  readonly assetCollectionId?: string\n  /** The ambient locale lens (only meaningful when `capabilities.locales`). */\n  readonly localeConfig: LocaleConfig\n  readonly activeLocale: Locale\n\n  // --- Reads -----------------------------------------------------------------\n  /** The full row set (view mechanics filter/sort this client-side). */\n  documents(): CmsDocument[]\n  get(ref: DocumentRef): CmsDocument | undefined\n  /** A relation/asset target's display title (hides the string-vs-function `titleField`). */\n  titleOf(ref: DocumentRef): string\n  /**\n   * List the candidate records of a relation field's declared `target` collection\n   * — the pick-list for a relation picker (EC-072). References are first-class and\n   * collection-based: the field's schema declares which collection(s) it targets,\n   * and this resolves those rows for ANY target (cross-collection), not just this\n   * source's own collection. The caller passes `field.target`; a multi-target field\n   * (future) merges one call per declared target. An unknown/empty target yields `[]`.\n   */\n  referenceCandidates(collectionId: string): CmsDocument[]\n  /**\n   * The workspace schema a reference/asset can point at — the schema counterpart to\n   * {@link referenceCandidates}. Needed for the cases that read a TARGET collection's\n   * fields (an asset field editing the asset collection's own metadata; the reuse\n   * capability correlating embed manifests against their target collection). A\n   * reference is collection-based, so resolving one sometimes needs the target's\n   * schema, not just its rows.\n   */\n  readonly collections: readonly CollectionDef[]\n  isFieldReadOnly(field: FieldDef): boolean\n  /**\n   * Principal-based field access (EC-240, vision AD-18): `edit` (writable), `read`\n   * (visible but read-only), or `hidden` (not rendered for this principal). This is\n   * IDENTITY-driven and distinct from a field's content-conditional `hidden(values)`\n   * — e.g. an editor's own `role` resolves to `read`, a viewer never SEES a\n   * sensitive field (`hidden`). A single tri-state (never two independent flags) so\n   * the nonsensical writable-but-invisible state can't be expressed. Optional:\n   * absent ⇒ derived from {@link isFieldReadOnly} (`read`|`edit`), i.e. default-open\n   * (permissions RESTRICT, never grant a baseline). Per-rail policy lives on the\n   * source; the starter's policy flows into its construction (engine = mechanism).\n   * Prefer {@link resolveFieldAccess} over calling this directly (it applies the\n   * default-open fallback).\n   */\n  fieldAccess?(field: FieldDef, record?: CmsDocument): FieldAccess\n  validate(doc: CmsDocument): CmsValidationIssue[]\n  /**\n   * Resolve an asset id to its display metadata for a cell/field, or `undefined`\n   * when there is no asset backend (a source without assets degrades to a label\n   * via {@link titleOf}, matching today's \"no AssetsProvider\" behaviour).\n   */\n  resolveAsset?(id: string): ResolvedAsset | undefined\n  /**\n   * How this rail's records are addressed in the EC-155 reference index — the\n   * target shape the delete/unpublish confirmation's inbound pre-flight queries\n   * (EC-433). Absent ⇒ the document shape (`{ type: 'document', id: 'collection:id' }`),\n   * which every `cmsDocuments` collection uses. The assets rail supplies\n   * `{ type: 'asset' }` so its list/bulk delete confirmation enumerates the SAME\n   * inbound references its detail surface does — a document-shaped lookup would\n   * report a referenced asset as \"not referenced\" (the EC-319 objection that\n   * originally kept `remove` off the assets rail).\n   */\n  referenceTarget?(ref: DocumentRef): ReferenceTarget\n  /** The last failed/denied mutation, surfaced by the shell (never a silent failure). */\n  readonly lastError: OperationError | null\n  clearLastError(): void\n  /**\n   * Land any queued/optimistic writes so a subsequent pre-flight READ sees them\n   * (the reference index is maintained on write). A source with no async\n   * persistence omits it — its reads are already authoritative.\n   */\n  flush?(): Promise<void>\n\n  /**\n   * The studio route splat for a record's detail surface (the row link + the\n   * post-create navigation target), e.g. `studioPath.cmsDocument(collectionId, id)`.\n   * Rail-owned so the list never hard-codes the CMS route. `undefined` ⇒ the rail\n   * has no detail surface, so rows render as plain text (no navigation).\n   */\n  detailPath?(id: string): string\n  /**\n   * The studio route splat for this rail's LIST surface — the edit shell's\n   * \"back to list\" breadcrumb crumb and its post-delete navigation target, e.g.\n   * `studioPath.cmsCollection(collectionId)`. Rail-owned so the edit shell never\n   * hard-codes the CMS route (the counterpart to {@link detailPath}). `undefined`\n   * ⇒ the crumb is unlinked and delete falls back to the project index.\n   */\n  readonly listPath?: string\n\n  // --- View state (list) -----------------------------------------------------\n  viewState(): TableViewState\n  setViewState(update: TableViewState | ((prev: TableViewState) => TableViewState)): void\n\n  // --- Writes ----------------------------------------------------------------\n  create(): DocumentRef\n  save(doc: CmsDocument): void\n  remove(ref: DocumentRef): void\n  /**\n   * Bulk publish/unpublish/delete/set-field (only when `capabilities.bulk`): one\n   * command PER item, per-item outcomes enumerated in the report (partial failure\n   * is never silent).\n   */\n  bulk?(ids: readonly string[], action: BulkAction, setField?: BulkSetField): Promise<BulkReport>\n\n  // --- Capability method groups (present iff the matching flag is set) --------\n  /** `publish` — published-pool predicate + publish/unpublish. */\n  readonly publishing?: PublishingCapability\n  /** `versions` — version history + restore. */\n  readonly versioning?: VersioningCapability\n  /** `inlineEdit` — the list's single-command optimistic cell write. */\n  readonly inlineEditing?: InlineEditCapability\n  /**\n   * Config-as-code named lenses (EC-246b) the header view selector switches\n   * between. Optional: a source that declares no named views (a non-CMS rail\n   * like users) omits it, and the selector renders nothing (single default).\n   */\n  readonly views?: NamedViewsCapability\n  /**\n   * `importExport` — JSON round-trip of the collection's records. CMS-specific;\n   * a rail whose records are credential-bearing (users) omits it, so neither the\n   * import dialog nor the export action mounts (identities aren't dumped to JSON).\n   */\n  readonly imports?: ImportCapability\n}\n\n/**\n * The capability matrix. Each flag gates a shell region AND the presence of its\n * method group. The **users rail** (EC-240) sets `publish:false`, `versions:false`\n * (credential caution), `create:false` (identity minted by sign-up), and no\n * `liveUrl`/`hierarchy`.\n */\nexport interface CollectionViewCapabilities {\n  readonly publish: boolean\n  readonly versions: boolean\n  readonly locales: boolean\n  readonly inlineEdit: boolean\n  readonly create: boolean\n  readonly remove: boolean\n  readonly bulk: boolean\n  /** The derived live-URL column (published pool × deployment routes). */\n  readonly liveUrl: boolean\n  /** Parent-self-relation tree mode (hierarchical collections only). */\n  readonly hierarchy: boolean\n  /** JSON import/export of the collection's records (off for credential rails). */\n  readonly importExport: boolean\n  /**\n   * The rail is administration-scoped (mirrors `ADMIN_ONLY_OPERATIONS`). The\n   * nav-permission layer reads this to gate the rail item. Absent ⇒ not admin-only.\n   */\n  readonly adminOnly?: boolean\n}\n\n/**\n * Principal-based field access (EC-240, AD-18). One tri-state drives BOTH visibility\n * and writability: `edit` (writable), `read` (visible, read-only), `hidden` (not\n * rendered). Default `edit` (default-open). Distinct from content-`hidden(values)`;\n * they compose — a field shows iff *not content-hidden AND access ≠ hidden*, and is\n * editable iff *access = edit AND not otherwise read-only* (published view, `form.readOnly`).\n */\nexport type FieldAccess = 'edit' | 'read' | 'hidden'\n\n/**\n * Resolve a field's effective principal access for a source — its {@link\n * CollectionViewSource.fieldAccess} policy when present, else derived from the\n * boolean `isFieldReadOnly` (default-open). The one place the shell asks \"may this\n * principal edit / see this field?\", so the default-open fallback lives in one spot.\n */\nexport function resolveFieldAccess(\n  source: CollectionViewSource,\n  field: FieldDef,\n  record?: CmsDocument,\n): FieldAccess {\n  return source.fieldAccess?.(field, record) ?? (source.isFieldReadOnly(field) ? 'read' : 'edit')\n}\n\n/** Asset display metadata a cell/field renders (thumbnail or labelled badge). */\nexport interface ResolvedAsset {\n  readonly url?: string\n  readonly contentType?: string\n  readonly title?: string\n  readonly filename?: string\n  readonly alt?: string\n}\n\n/** `publish` capability. */\nexport interface PublishingCapability {\n  /** Published-ness from the version pointer (NOT a row field). */\n  isPublished(ref: DocumentRef): boolean\n  publish(ref: DocumentRef): Promise<void>\n  unpublish(ref: DocumentRef): Promise<void>\n  /**\n   * Live URLs for the routable documents, keyed by id — derived from the\n   * PUBLISHED pool (never draft rows) so an unpublished slug/parent edit can't\n   * leak into a live link (EC-205/EC-216). `null` when the collection is not\n   * routable → the live-URL column is hidden. Only present when `capabilities.liveUrl`.\n   */\n  liveUrls?(): Map<string, DocumentUrl> | null\n}\n\n/** `versions` capability. */\nexport interface VersioningCapability {\n  restore(ref: DocumentRef, version: number, scope?: RestoreScope): Promise<CmsDocument | null>\n  /**\n   * The document's recorded version history + live pin. Folds the flush-before-read\n   * ordering INTO the loader (the adapter's concern), so every fetch lists an\n   * authoritative history regardless of which surface triggered the change (EC-224).\n   */\n  load(ref: DocumentRef): Promise<DocumentVersionsView>\n}\n\n/** `inlineEdit` capability: the list's single-command optimistic cell write (EC-168). */\nexport interface InlineEditCapability {\n  commitField(input: CellCommitInput): Promise<CellCommitOutcome>\n}\n\n/** A named lens the header selector offers — id + display name only (the header never needs its state). */\nexport interface NamedView {\n  readonly id: string\n  /** Display name; a {@link LocalizedString} (EC-343), resolved at the render site like `form.label`. */\n  readonly name: LocalizedString\n}\n\n/** `importExport` capability: validate + fold external JSON records into the collection (EC-079). */\nexport interface ImportCapability {\n  importDocuments(items: unknown[]): ImportReport\n}\n\n/**\n * `views` capability: config-as-code named lenses (EC-246b). The header selector\n * only *picks* a lens — it never creates/edits/deletes one (shared views are code).\n */\nexport interface NamedViewsCapability {\n  /** The built-in default + config-declared named views. */\n  list(): readonly NamedView[]\n  /** The currently-selected view id. */\n  activeId(): string\n  /** Switch views (resets the working table state to the view's baseline). */\n  setActive(id: string): void\n}\n\nexport type { CellCommitInput, CellCommitOutcome, ImportReport }\n"]}

package/dist/lib/dnd/gap-drag.d.ts

@@ -45,7 +45,10 @@ export interface GapRect {
 /**
  * One draggable spot between two adjacent children. `x`/`y` is the gap's
  * center point; `crossStart`/`crossLength` span the children's shared extent
- * on the cross axis (the handle's visible length).
+ * on the cross axis (the handle's visible length); `gapStart`/`gapLength`
+ * span the gap REGION itself along the flow axis (the leading child's
+ * trailing edge to the trailing child's leading edge — the hatched rectangle
+ * the EC-435 gap visualization paints).
  */
 export interface GapHandleSpot {
     /** Index of the leading child of the pair. */
@@ -54,6 +57,10 @@ export interface GapHandleSpot {
     y: number;
     crossStart: number;
     crossLength: number;
+    /** Leading edge of the gap along the flow axis (= child N's trailing edge). */
+    gapStart: number;
+    /** Rendered extent of the gap along the flow axis (0 for a closed gap). */
+    gapLength: number;
 }
 /**
  * The handle spots between consecutive child rects along the container's flow

package/dist/lib/dnd/gap-drag.js

@@ -88,6 +88,10 @@ export function gapHandleSpots(rects, axis) {
             y: axis === 'horizontal' ? crossStart + (crossEnd - crossStart) / 2 : mid,
             crossStart,
             crossLength: crossEnd - crossStart,
+            gapStart: aEnd,
+            // Sub-pixel layout can put bStart a hair before aEnd (the wrap tolerance
+            // above admits it) — a gap region never has negative extent.
+            gapLength: Math.max(0, bStart - aEnd),
         });
     }
     return spots;

package/dist/lib/dnd/gap-drag.js.map

@@ -1 +1 @@
-{"version":3,"file":"gap-drag.js","sourceRoot":"","sources":["../../../src/lib/dnd/gap-drag.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,yBAAyB,GAC1B,MAAM,+BAA+B,CAAA;AAiBtC,mFAAmF;AACnF,MAAM,CAAC,MAAM,SAAS,GAAuB,CAAC,IAAI,EAAE,GAAG,mBAAmB,CAAC,CAAA;AAE3E,iFAAiF;AACjF,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,CAAA;AAE5B,8DAA8D;AAC9D,MAAM,UAAU,SAAS,CAAC,IAAa;IACrC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,CAAC,CAAA;IAC3B,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;IACpC,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAA;AACzD,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,UAAU,CAAC,IAAa;IACtC,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;AACxD,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,IAAI,IAAI,GAAY,IAAI,CAAA;IACxB,IAAI,YAAY,GAAG,MAAM,CAAC,iBAAiB,CAAA;IAC3C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;QAC/C,IAAI,QAAQ,GAAG,YAAY,EAAE,CAAC;YAC5B,YAAY,GAAG,QAAQ,CAAA;YACvB,IAAI,GAAG,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,OAAe;IAC7D,OAAO,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,CAAA;AACnD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAmB;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAA;IAChC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACpC,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAA;IACvF,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;IACzB,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AA4BD;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,KAAyB,EAAE,IAAc;IACtE,MAAM,KAAK,GAAoB,EAAE,CAAA;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAA;QACnB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAA;QACvB,MAAM,IAAI,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,CAAA;QACxE,MAAM,MAAM,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;QACrD,wEAAwE;QACxE,2EAA2E;QAC3E,IAAI,MAAM,GAAG,IAAI,GAAG,GAAG;YAAE,SAAQ;QACjC,MAAM,UAAU,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;QAC5F,MAAM,QAAQ,GACZ,IAAI,KAAK,YAAY;YACnB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;YAC9C,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAA;QAClD,IAAI,QAAQ,IAAI,UAAU;YAAE,SAAQ;QACpC,MAAM,GAAG,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QAC/B,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,CAAC;YACR,CAAC,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC;YACzE,CAAC,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG;YACzE,UAAU;YACV,WAAW,EAAE,QAAQ,GAAG,UAAU;SACnC,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC","sourcesContent":["import {\n  SPACING_TOKEN_CSS,\n  SPACING_TOKEN_NAMES,\n  isSpacingTokenName,\n  isStaticProp,\n  spacingTokenFromLegacyGap,\n} from '@elytracms/core/project-graph'\nimport type { ComponentNode, SpacingTokenName } from '@elytracms/core/project-graph'\nimport type { FlowAxis } from './drop-rules'\n\n/**\n * Tokenized gap-drag math (EC-163, vision §3.1 / AD-10) — pure functions with\n * no DOM dependencies, shared by the canvas spacing handles. The drag model is\n * deliberately token-quantized: a pointer delta moves the gap through the\n * EC-161 spacing-token *steps*, and the only values that can ever be produced\n * are a `SpacingTokenName` or `null` (\"no gap\" — the prop is removed, exactly\n * what the layout inspector's \"None\" choice does). No freeform pixel value can\n * leave this module, so none can enter the graph from the canvas.\n */\n\n/** A gap step the drag can land on: a spacing token, or `null` for \"no gap\". */\nexport type GapStep = SpacingTokenName | null\n\n/** The full drag range, smallest to largest: none, then the EC-161 token scale. */\nexport const GAP_STEPS: readonly GapStep[] = [null, ...SPACING_TOKEN_NAMES]\n\n/** Canvas root font size — the deterministic rem basis for token CSS lengths. */\nexport const GAP_REM_PX = 16\n\n/** The pixel length of a gap step at the canvas rem basis. */\nexport function gapStepPx(step: GapStep): number {\n  if (step === null) return 0\n  const css = SPACING_TOKEN_CSS[step]\n  const value = Number.parseFloat(css)\n  return css.endsWith('rem') ? value * GAP_REM_PX : value\n}\n\n/** The CSS length a previewed step renders with (the same length the renderer emits). */\nexport function gapStepCss(step: GapStep): string {\n  return step === null ? '0px' : SPACING_TOKEN_CSS[step]\n}\n\n/** Snap a raw pixel gap onto the nearest step of the token scale. */\nexport function nearestGapStep(px: number): GapStep {\n  let best: GapStep = null\n  let bestDistance = Number.POSITIVE_INFINITY\n  for (const step of GAP_STEPS) {\n    const distance = Math.abs(gapStepPx(step) - px)\n    if (distance < bestDistance) {\n      bestDistance = distance\n      best = step\n    }\n  }\n  return best\n}\n\n/**\n * The step a drag lands on: the starting step's pixel length plus the pointer\n * delta along the container's flow axis, snapped to the scale. Monotonic and\n * deterministic — the same delta from the same start always lands on the same\n * token.\n */\nexport function gapStepFromDrag(start: GapStep, deltaPx: number): GapStep {\n  return nearestGapStep(gapStepPx(start) + deltaPx)\n}\n\n/**\n * The current gap step of a container node: a token name verbatim, a legacy\n * on-scale integer mapped to its token, anything else (absent, off-scale,\n * bound) as `null` — mirroring how the layout inspector reads the same prop,\n * so handle and inspector always start from the same value.\n */\nexport function containerGapStep(node: ComponentNode): GapStep {\n  const prop = node.props?.['gap']\n  if (!isStaticProp(prop)) return null\n  if (typeof prop.value === 'string' && isSpacingTokenName(prop.value)) return prop.value\n  if (typeof prop.value === 'number') {\n    const token = spacingTokenFromLegacyGap(prop.value)\n    if (token) return token\n  }\n  return null\n}\n\n// ---------------------------------------------------------------------------\n// Handle geometry — where the between-children handles sit\n// ---------------------------------------------------------------------------\n\n/** A minimal rectangle (client or document coordinates — caller's choice). */\nexport interface GapRect {\n  left: number\n  top: number\n  width: number\n  height: number\n}\n\n/**\n * One draggable spot between two adjacent children. `x`/`y` is the gap's\n * center point; `crossStart`/`crossLength` span the children's shared extent\n * on the cross axis (the handle's visible length).\n */\nexport interface GapHandleSpot {\n  /** Index of the leading child of the pair. */\n  index: number\n  x: number\n  y: number\n  crossStart: number\n  crossLength: number\n}\n\n/**\n * The handle spots between consecutive child rects along the container's flow\n * axis. Pairs that wrap (grid rows: the next rect starts before the previous\n * ends along the axis) or that do not overlap on the cross axis yield no\n * handle — handles only ever sit in real gaps between visual neighbours.\n * Works at gap 0 too: the handle sits on the shared boundary so a closed gap\n * can be dragged open.\n */\nexport function gapHandleSpots(rects: readonly GapRect[], axis: FlowAxis): GapHandleSpot[] {\n  const spots: GapHandleSpot[] = []\n  for (let i = 0; i < rects.length - 1; i += 1) {\n    const a = rects[i]!\n    const b = rects[i + 1]!\n    const aEnd = axis === 'horizontal' ? a.left + a.width : a.top + a.height\n    const bStart = axis === 'horizontal' ? b.left : b.top\n    // Wrapped to the next row/column: not visual neighbours along the axis.\n    // A small tolerance keeps sub-pixel layout from dropping legitimate pairs.\n    if (bStart < aEnd - 0.5) continue\n    const crossStart = axis === 'horizontal' ? Math.max(a.top, b.top) : Math.max(a.left, b.left)\n    const crossEnd =\n      axis === 'horizontal'\n        ? Math.min(a.top + a.height, b.top + b.height)\n        : Math.min(a.left + a.width, b.left + b.width)\n    if (crossEnd <= crossStart) continue\n    const mid = (aEnd + bStart) / 2\n    spots.push({\n      index: i,\n      x: axis === 'horizontal' ? mid : crossStart + (crossEnd - crossStart) / 2,\n      y: axis === 'horizontal' ? crossStart + (crossEnd - crossStart) / 2 : mid,\n      crossStart,\n      crossLength: crossEnd - crossStart,\n    })\n  }\n  return spots\n}\n"]}
+{"version":3,"file":"gap-drag.js","sourceRoot":"","sources":["../../../src/lib/dnd/gap-drag.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,yBAAyB,GAC1B,MAAM,+BAA+B,CAAA;AAiBtC,mFAAmF;AACnF,MAAM,CAAC,MAAM,SAAS,GAAuB,CAAC,IAAI,EAAE,GAAG,mBAAmB,CAAC,CAAA;AAE3E,iFAAiF;AACjF,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,CAAA;AAE5B,8DAA8D;AAC9D,MAAM,UAAU,SAAS,CAAC,IAAa;IACrC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,CAAC,CAAA;IAC3B,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;IACpC,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAA;AACzD,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,UAAU,CAAC,IAAa;IACtC,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;AACxD,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,IAAI,IAAI,GAAY,IAAI,CAAA;IACxB,IAAI,YAAY,GAAG,MAAM,CAAC,iBAAiB,CAAA;IAC3C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;QAC/C,IAAI,QAAQ,GAAG,YAAY,EAAE,CAAC;YAC5B,YAAY,GAAG,QAAQ,CAAA;YACvB,IAAI,GAAG,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,OAAe;IAC7D,OAAO,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,CAAA;AACnD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAmB;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAA;IAChC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACpC,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAA;IACvF,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;IACzB,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAmCD;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,KAAyB,EAAE,IAAc;IACtE,MAAM,KAAK,GAAoB,EAAE,CAAA;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAA;QACnB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAA;QACvB,MAAM,IAAI,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,CAAA;QACxE,MAAM,MAAM,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;QACrD,wEAAwE;QACxE,2EAA2E;QAC3E,IAAI,MAAM,GAAG,IAAI,GAAG,GAAG;YAAE,SAAQ;QACjC,MAAM,UAAU,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;QAC5F,MAAM,QAAQ,GACZ,IAAI,KAAK,YAAY;YACnB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;YAC9C,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAA;QAClD,IAAI,QAAQ,IAAI,UAAU;YAAE,SAAQ;QACpC,MAAM,GAAG,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QAC/B,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,CAAC;YACR,CAAC,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC;YACzE,CAAC,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG;YACzE,UAAU;YACV,WAAW,EAAE,QAAQ,GAAG,UAAU;YAClC,QAAQ,EAAE,IAAI;YACd,yEAAyE;YACzE,6DAA6D;YAC7D,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;SACtC,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC","sourcesContent":["import {\n  SPACING_TOKEN_CSS,\n  SPACING_TOKEN_NAMES,\n  isSpacingTokenName,\n  isStaticProp,\n  spacingTokenFromLegacyGap,\n} from '@elytracms/core/project-graph'\nimport type { ComponentNode, SpacingTokenName } from '@elytracms/core/project-graph'\nimport type { FlowAxis } from './drop-rules'\n\n/**\n * Tokenized gap-drag math (EC-163, vision §3.1 / AD-10) — pure functions with\n * no DOM dependencies, shared by the canvas spacing handles. The drag model is\n * deliberately token-quantized: a pointer delta moves the gap through the\n * EC-161 spacing-token *steps*, and the only values that can ever be produced\n * are a `SpacingTokenName` or `null` (\"no gap\" — the prop is removed, exactly\n * what the layout inspector's \"None\" choice does). No freeform pixel value can\n * leave this module, so none can enter the graph from the canvas.\n */\n\n/** A gap step the drag can land on: a spacing token, or `null` for \"no gap\". */\nexport type GapStep = SpacingTokenName | null\n\n/** The full drag range, smallest to largest: none, then the EC-161 token scale. */\nexport const GAP_STEPS: readonly GapStep[] = [null, ...SPACING_TOKEN_NAMES]\n\n/** Canvas root font size — the deterministic rem basis for token CSS lengths. */\nexport const GAP_REM_PX = 16\n\n/** The pixel length of a gap step at the canvas rem basis. */\nexport function gapStepPx(step: GapStep): number {\n  if (step === null) return 0\n  const css = SPACING_TOKEN_CSS[step]\n  const value = Number.parseFloat(css)\n  return css.endsWith('rem') ? value * GAP_REM_PX : value\n}\n\n/** The CSS length a previewed step renders with (the same length the renderer emits). */\nexport function gapStepCss(step: GapStep): string {\n  return step === null ? '0px' : SPACING_TOKEN_CSS[step]\n}\n\n/** Snap a raw pixel gap onto the nearest step of the token scale. */\nexport function nearestGapStep(px: number): GapStep {\n  let best: GapStep = null\n  let bestDistance = Number.POSITIVE_INFINITY\n  for (const step of GAP_STEPS) {\n    const distance = Math.abs(gapStepPx(step) - px)\n    if (distance < bestDistance) {\n      bestDistance = distance\n      best = step\n    }\n  }\n  return best\n}\n\n/**\n * The step a drag lands on: the starting step's pixel length plus the pointer\n * delta along the container's flow axis, snapped to the scale. Monotonic and\n * deterministic — the same delta from the same start always lands on the same\n * token.\n */\nexport function gapStepFromDrag(start: GapStep, deltaPx: number): GapStep {\n  return nearestGapStep(gapStepPx(start) + deltaPx)\n}\n\n/**\n * The current gap step of a container node: a token name verbatim, a legacy\n * on-scale integer mapped to its token, anything else (absent, off-scale,\n * bound) as `null` — mirroring how the layout inspector reads the same prop,\n * so handle and inspector always start from the same value.\n */\nexport function containerGapStep(node: ComponentNode): GapStep {\n  const prop = node.props?.['gap']\n  if (!isStaticProp(prop)) return null\n  if (typeof prop.value === 'string' && isSpacingTokenName(prop.value)) return prop.value\n  if (typeof prop.value === 'number') {\n    const token = spacingTokenFromLegacyGap(prop.value)\n    if (token) return token\n  }\n  return null\n}\n\n// ---------------------------------------------------------------------------\n// Handle geometry — where the between-children handles sit\n// ---------------------------------------------------------------------------\n\n/** A minimal rectangle (client or document coordinates — caller's choice). */\nexport interface GapRect {\n  left: number\n  top: number\n  width: number\n  height: number\n}\n\n/**\n * One draggable spot between two adjacent children. `x`/`y` is the gap's\n * center point; `crossStart`/`crossLength` span the children's shared extent\n * on the cross axis (the handle's visible length); `gapStart`/`gapLength`\n * span the gap REGION itself along the flow axis (the leading child's\n * trailing edge to the trailing child's leading edge — the hatched rectangle\n * the EC-435 gap visualization paints).\n */\nexport interface GapHandleSpot {\n  /** Index of the leading child of the pair. */\n  index: number\n  x: number\n  y: number\n  crossStart: number\n  crossLength: number\n  /** Leading edge of the gap along the flow axis (= child N's trailing edge). */\n  gapStart: number\n  /** Rendered extent of the gap along the flow axis (0 for a closed gap). */\n  gapLength: number\n}\n\n/**\n * The handle spots between consecutive child rects along the container's flow\n * axis. Pairs that wrap (grid rows: the next rect starts before the previous\n * ends along the axis) or that do not overlap on the cross axis yield no\n * handle — handles only ever sit in real gaps between visual neighbours.\n * Works at gap 0 too: the handle sits on the shared boundary so a closed gap\n * can be dragged open.\n */\nexport function gapHandleSpots(rects: readonly GapRect[], axis: FlowAxis): GapHandleSpot[] {\n  const spots: GapHandleSpot[] = []\n  for (let i = 0; i < rects.length - 1; i += 1) {\n    const a = rects[i]!\n    const b = rects[i + 1]!\n    const aEnd = axis === 'horizontal' ? a.left + a.width : a.top + a.height\n    const bStart = axis === 'horizontal' ? b.left : b.top\n    // Wrapped to the next row/column: not visual neighbours along the axis.\n    // A small tolerance keeps sub-pixel layout from dropping legitimate pairs.\n    if (bStart < aEnd - 0.5) continue\n    const crossStart = axis === 'horizontal' ? Math.max(a.top, b.top) : Math.max(a.left, b.left)\n    const crossEnd =\n      axis === 'horizontal'\n        ? Math.min(a.top + a.height, b.top + b.height)\n        : Math.min(a.left + a.width, b.left + b.width)\n    if (crossEnd <= crossStart) continue\n    const mid = (aEnd + bStart) / 2\n    spots.push({\n      index: i,\n      x: axis === 'horizontal' ? mid : crossStart + (crossEnd - crossStart) / 2,\n      y: axis === 'horizontal' ? crossStart + (crossEnd - crossStart) / 2 : mid,\n      crossStart,\n      crossLength: crossEnd - crossStart,\n      gapStart: aEnd,\n      // Sub-pixel layout can put bStart a hair before aEnd (the wrap tolerance\n      // above admits it) — a gap region never has negative extent.\n      gapLength: Math.max(0, bStart - aEnd),\n    })\n  }\n  return spots\n}\n"]}

package/dist/lib/i18n/messages.de.js

@@ -956,14 +956,15 @@ export const deMessages = {
     'richText.embed.editTitle': '{name} bearbeiten',
     'richText.embed.noProps': 'Diese Komponente hat keine bearbeitbaren Einstellungen.',
     'richText.embed.blocksNote': 'Verschachtelte Inhaltsbereiche werden auf der Arbeitsfläche bearbeitet, nicht hier.',
-    'richText.embed.inspectorBack': 'Zurück zum Dokument',
     'richText.slash.text': 'Text',
     'richText.slash.empty': 'Keine passenden Blöcke',
     'richText.slash.componentsGroup': 'Komponenten',
-    // EC-388 — expand the editing surface (a roomy sheet for long prose).
+    // EC-388/EC-431 — expand the editing surface (the centered stage for long prose).
     'richText.expand.expand': 'Editor vergrößern',
     'richText.expand.collapse': 'Editor verkleinern',
     'richText.expand.title': 'Rich Text',
+    // EC-436 — Titel der vergrößerten Ansicht mit Feldbezeichnung ({field}).
+    'richText.expand.titleWithField': '{field} — Rich Text',
     'richText.expand.editingInSheet': 'Bearbeitung in der vergrößerten Ansicht — klicken Sie, um zurückzukehren',
     // ─────────────────────────────────────────────────────────────────────────
     // EC-199 — AI assistant chat panel + creation flow