@elytracms/studio 0.0.68 → 0.0.70

package/dist/components/rail-view-source.js

@@ -1,5 +1,6 @@
 import { useCallback, useMemo, useState } from 'react';
 import { defaultViewState } from '@elytracms/studio/lib/cms-views';
+import { runBulkAction } from './cms/bulk-actions.js';
 /** The default normalizer for an {@link OkResult}: a failure maps to a
  *  surfaced {@link OperationError}; a success maps to no error at all. */
 export function normalizeOkResult(result) {
@@ -34,6 +35,37 @@ export function createErrorMappedWriter(write, normalize, setError) {
         });
     };
 }
+/**
+ * The primitive rails' bulk runner (EC-433): the SAME `runBulkAction` machinery
+ * the CMS rail uses ([[client-data-flow-one-cache]] — no parallel data flow),
+ * wired to the rail's own store delete. Only `delete` is dispatchable — the
+ * rails have no publish lifecycle and no bulk set-field — and an unsupported
+ * action fails each item HONESTLY in the report rather than silently no-oping
+ * (the exact bug this replaces: the assets rail's bulk delete confirmed into a
+ * missing `source.bulk` and dropped the whole action on the floor).
+ */
+export function runRailBulkAction(input, ids, action, setField) {
+    return runBulkAction({
+        documents: input.documents,
+        titleOf: input.titleOf,
+        validate: input.validate,
+        // A rail store patches its own cache/state inside a succeeded remove
+        // (assets/users/redirects all do), and publish/unpublish/set-field never
+        // succeed here (dispatch rejects them), so the session-apply hooks have
+        // nothing left to apply.
+        applyState: () => undefined,
+        applyDelete: () => undefined,
+        dispatch: (bulkAction, ref) => bulkAction === 'delete'
+            ? input.removeConfirmed(ref)
+            : Promise.resolve({
+                ok: false,
+                error: {
+                    code: 'unknown',
+                    message: `Bulk ${bulkAction} is not supported in this view.`,
+                },
+            }),
+    }, input.collectionId, ids, action, setField);
+}
 /**
  * Pure assembly of a {@link CollectionViewSource} from a rail's resolved
  * fields + state. Exported (and taking plain data/functions, no hook) so it is
@@ -42,7 +74,7 @@ export function createErrorMappedWriter(write, normalize, setError) {
  * wrapper around it.
  */
 export function assembleRailViewSource(input) {
-    const { projectId, schema, capabilities, localeConfig, documents, get, titleOf, referenceCandidates, collections, detailPath, listPath, isFieldReadOnly, fieldAccess, validate, create, lastError, clearLastError, viewState, setViewState, save, remove, } = input;
+    const { projectId, schema, capabilities, localeConfig, documents, get, titleOf, referenceCandidates, collections, detailPath, listPath, isFieldReadOnly, fieldAccess, referenceTarget, validate, create, lastError, clearLastError, viewState, setViewState, save, remove, bulk, } = input;
     return {
         collectionId: schema.id,
         schema,
@@ -59,6 +91,7 @@ export function assembleRailViewSource(input) {
         ...(listPath !== undefined ? { listPath } : {}),
         isFieldReadOnly: isFieldReadOnly ?? ((field) => field.form?.readOnly ?? false),
         ...(fieldAccess ? { fieldAccess } : {}),
+        ...(referenceTarget ? { referenceTarget } : {}),
         validate,
         lastError,
         clearLastError,
@@ -67,6 +100,8 @@ export function assembleRailViewSource(input) {
         create,
         save,
         remove,
+        // Present iff the capability flag is set (the CollectionViewSource contract).
+        ...(capabilities.bulk && bulk ? { bulk } : {}),
     };
 }
 /**
@@ -78,7 +113,7 @@ export function assembleRailViewSource(input) {
  * here.
  */
 export function useRailViewSource(adapter) {
-    const { projectId, schema, capabilities, localeConfig, documents, get, titleOf, referenceCandidates, collections, detailPath, listPath, isFieldReadOnly, fieldAccess, validate, create, save: rawSave, remove: rawRemove, normalizeSaveResult, normalizeRemoveResult, } = adapter;
+    const { projectId, schema, capabilities, localeConfig, documents, get, titleOf, referenceCandidates, collections, detailPath, listPath, isFieldReadOnly, fieldAccess, referenceTarget, validate, create, save: rawSave, remove: rawRemove, bulkRemove, normalizeSaveResult, normalizeRemoveResult, } = adapter;
     const [viewState, setViewStateRaw] = useState(() => defaultViewState(schema));
     const [lastError, setLastError] = useState(null);
     const setViewState = useCallback((update) => {
@@ -90,6 +125,21 @@ export function useRailViewSource(adapter) {
         normalizeSaveResult,
     ]);
     const remove = useCallback(createErrorMappedWriter(rawRemove, normalizeRemoveResult, setLastError), [rawRemove, normalizeRemoveResult]);
+    // The rail bulk runner (EC-433): the shared `runBulkAction` machinery over
+    // the rail's own confirmed delete, its store result reconciled into an
+    // operation-shaped outcome (a failing remove is a visible per-item failure).
+    // Assembled onto the source only when `capabilities.bulk` is set (below).
+    const bulk = useCallback((ids, action, setField) => runRailBulkAction({
+        collectionId: schema.id,
+        documents: documents(),
+        titleOf,
+        validate,
+        removeConfirmed: async (ref) => {
+            const result = await (bulkRemove ?? rawRemove)(ref);
+            const error = normalizeRemoveResult(result);
+            return error ? { ok: false, error } : { ok: true, value: undefined };
+        },
+    }, ids, action, setField), [schema.id, documents, titleOf, validate, bulkRemove, rawRemove, normalizeRemoveResult]);
     return useMemo(() => assembleRailViewSource({
         projectId,
         schema,
@@ -104,6 +154,7 @@ export function useRailViewSource(adapter) {
         listPath,
         isFieldReadOnly,
         fieldAccess,
+        referenceTarget,
         validate,
         create,
         lastError,
@@ -112,6 +163,7 @@ export function useRailViewSource(adapter) {
         setViewState,
         save,
         remove,
+        bulk,
     }), [
         projectId,
         schema,
@@ -126,6 +178,7 @@ export function useRailViewSource(adapter) {
         listPath,
         isFieldReadOnly,
         fieldAccess,
+        referenceTarget,
         validate,
         create,
         lastError,
@@ -134,6 +187,7 @@ export function useRailViewSource(adapter) {
         setViewState,
         save,
         remove,
+        bulk,
     ]);
 }
 //# sourceMappingURL=rail-view-source.js.map

package/dist/components/rail-view-source.js.map

@@ -1 +1 @@
-{"version":3,"file":"rail-view-source.js","sourceRoot":"","sources":["../../src/components/rail-view-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAUtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAiClE;0EAC0E;AAC1E,MAAM,UAAU,iBAAiB,CAAC,MAAgB;IAChD,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAA;AACxE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAA+B,EAC/B,cAAmC;IAEnC,MAAM,IAAI,GAA4B,EAAE,CAAA;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IACjD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;gFAEgF;AAChF,MAAM,UAAU,uBAAuB,CACrC,KAAsC,EACtC,SAAqD,EACrD,QAAyC;IAEzC,OAAO,CAAC,GAAS,EAAE,EAAE;QACnB,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YAC9B,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;YAC/B,IAAI,KAAK;gBAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC5B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA;AACH,CAAC;AAiDD;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAkC;IACvE,MAAM,EACJ,SAAS,EACT,MAAM,EACN,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,GAAG,EACH,OAAO,EACP,mBAAmB,EACnB,WAAW,EACX,UAAU,EACV,QAAQ,EACR,eAAe,EACf,WAAW,EACX,QAAQ,EACR,MAAM,EACN,SAAS,EACT,cAAc,EACd,SAAS,EACT,YAAY,EACZ,IAAI,EACJ,MAAM,GACP,GAAG,KAAK,CAAA;IACT,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,EAAE;QACvB,MAAM;QACN,YAAY;QACZ,SAAS;QACT,YAAY;QACZ,YAAY,EAAE,YAAY,CAAC,OAAO;QAClC,SAAS;QACT,GAAG;QACH,OAAO;QACP,mBAAmB,EAAE,mBAAmB,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QACtD,WAAW,EAAE,WAAW,IAAI,CAAC,MAAM,CAAC;QACpC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,eAAe,EAAE,eAAe,IAAI,CAAC,CAAC,KAAe,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,IAAI,KAAK,CAAC;QACxF,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,QAAQ;QACR,SAAS;QACT,cAAc;QACd,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS;QAC1B,YAAY;QACZ,MAAM;QACN,IAAI;QACJ,MAAM;KACP,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAgD;IAEhD,MAAM,EACJ,SAAS,EACT,MAAM,EACN,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,GAAG,EACH,OAAO,EACP,mBAAmB,EACnB,WAAW,EACX,UAAU,EACV,QAAQ,EACR,eAAe,EACf,WAAW,EACX,QAAQ,EACR,MAAM,EACN,IAAI,EAAE,OAAO,EACb,MAAM,EAAE,SAAS,EACjB,mBAAmB,EACnB,qBAAqB,GACtB,GAAG,OAAO,CAAA;IAEX,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAiB,GAAG,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAA;IAC7F,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAwB,IAAI,CAAC,CAAA;IAEvE,MAAM,YAAY,GAAG,WAAW,CAAuC,CAAC,MAAM,EAAE,EAAE;QAChF,eAAe,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;IACnF,CAAC,EAAE,EAAE,CAAC,CAAA;IACN,MAAM,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;IAEhE,MAAM,IAAI,GAAG,WAAW,CAAC,uBAAuB,CAAC,OAAO,EAAE,mBAAmB,EAAE,YAAY,CAAC,EAAE;QAC5F,OAAO;QACP,mBAAmB;KACpB,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,WAAW,CACxB,uBAAuB,CAAC,SAAS,EAAE,qBAAqB,EAAE,YAAY,CAAC,EACvE,CAAC,SAAS,EAAE,qBAAqB,CAAC,CACnC,CAAA;IAED,OAAO,OAAO,CACZ,GAAG,EAAE,CACH,sBAAsB,CAAC;QACrB,SAAS;QACT,MAAM;QACN,YAAY;QACZ,YAAY;QACZ,SAAS;QACT,GAAG;QACH,OAAO;QACP,mBAAmB;QACnB,WAAW;QACX,UAAU;QACV,QAAQ;QACR,eAAe;QACf,WAAW;QACX,QAAQ;QACR,MAAM;QACN,SAAS;QACT,cAAc;QACd,SAAS;QACT,YAAY;QACZ,IAAI;QACJ,MAAM;KACP,CAAC,EACJ;QACE,SAAS;QACT,MAAM;QACN,YAAY;QACZ,YAAY;QACZ,SAAS;QACT,GAAG;QACH,OAAO;QACP,mBAAmB;QACnB,WAAW;QACX,UAAU;QACV,QAAQ;QACR,eAAe;QACf,WAAW;QACX,QAAQ;QACR,MAAM;QACN,SAAS;QACT,cAAc;QACd,SAAS;QACT,YAAY;QACZ,IAAI;QACJ,MAAM;KACP,CACF,CAAA;AACH,CAAC","sourcesContent":["import { useCallback, useMemo, useState } from 'react'\nimport type {\n  CmsDocument,\n  CmsValidationIssue,\n  CollectionDef,\n  DocumentRef,\n  FieldDef,\n  LocaleConfig,\n} from '@elytracms/core/cms-core'\nimport type { OperationError } from '@elytracms/core/operations'\nimport { defaultViewState } from '@elytracms/studio/lib/cms-views'\nimport type { TableViewState } from '@elytracms/studio/lib/cms-views'\nimport type {\n  CollectionViewCapabilities,\n  CollectionViewSource,\n  FieldAccess,\n} from '@elytracms/studio/lib/collection-view/collection-view-source'\n\n/**\n * The shared scaffold behind the primitive-rail `CollectionViewSource` hooks\n * (EC-327) — assets, users, redirects. All three hand-rolled identical\n * `viewState`/`lastError` state, an identical `setViewState` updater-fn\n * wrapper, an identical `if (!result.ok) setLastError(...)` error-mapping\n * shape (assets' `remove` diverges — see {@link OkResult} below), and a large\n * final `useMemo` assembling the same ~20-field {@link CollectionViewSource}.\n * The 4th rail (`useCmsCollectionViewSource`) does NOT reduplicate this — it\n * delegates to the ambient `CmsStore` — so this scaffold is scoped to the\n * three self-contained rails, not a fully generic replacement for the CMS\n * adapter.\n *\n * Genuinely divergent per-rail behaviour is a PARAMETER, never hidden here:\n * users' principal-based `fieldAccess`, users' no-op vs. redirects/assets'\n * registry-driven `validate`, redirects-only `create`, and — the one save/\n * remove result-shape mismatch — assets' `remove()` returns an\n * `outcome`-discriminated result where users/redirects use `{ ok }`; each rail\n * supplies its own `normalizeSaveResult`/`normalizeRemoveResult` to reconcile\n * whichever shape its store returns into `lastError`.\n */\n\n/** The common `{ ok: true; … } | { ok: false; message }` store-result shape —\n *  users' and redirects' save/remove, and assets' `updateMetadata` (save). */\nexport type OkResult = { ok: true } | { ok: false; message: string }\n\n/** The default normalizer for an {@link OkResult}: a failure maps to a\n *  surfaced {@link OperationError}; a success maps to no error at all. */\nexport function normalizeOkResult(result: OkResult): OperationError | null {\n  return result.ok ? null : { code: 'unknown', message: result.message }\n}\n\n/**\n * Project a lens document's values into a meta bag (EC-311/EC-240/EC-303):\n * every entry whose key is NOT one of the rail's canonical/identity field\n * names round-trips through the record's open `meta` bag. Shared by the users\n * (`IDENTITY_FIELDS`) and redirects (`CANONICAL_REDIRECT_FIELDS`) rails — the\n * assets rail's projection is schema-FIELDS-driven inclusion (iterating the\n * schema's declared fields, not the document's value keys), a genuinely\n * different shape that stays bespoke in `assets-collection-view-source.ts`.\n */\nexport function metaBagProjection(\n  values: Record<string, unknown>,\n  canonicalNames: ReadonlySet<string>,\n): Record<string, unknown> {\n  const meta: Record<string, unknown> = {}\n  for (const [key, value] of Object.entries(values)) {\n    if (!canonicalNames.has(key)) meta[key] = value\n  }\n  return meta\n}\n\n/** Wrap a raw store write (save/remove) so a normalized failure surfaces via\n *  `setError` — the factory's error-mapping plumbing, pulled out as a plain\n *  function (no hook) so it is unit-testable without a `renderHook` harness. */\nexport function createErrorMappedWriter<TArg, TResult>(\n  write: (arg: TArg) => Promise<TResult>,\n  normalize: (result: TResult) => OperationError | null,\n  setError: (error: OperationError) => void,\n): (arg: TArg) => void {\n  return (arg: TArg) => {\n    void write(arg).then((result) => {\n      const error = normalize(result)\n      if (error) setError(error)\n    })\n  }\n}\n\n/** The fields shared by {@link RailAdapter} and the pure assembly input —\n *  everything the factory copies straight onto the assembled source, or\n *  defaults when a rail omits it. */\ninterface RailViewSourceCore {\n  readonly projectId: string\n  readonly schema: CollectionDef\n  readonly capabilities: CollectionViewCapabilities\n  readonly localeConfig: LocaleConfig\n  documents(): CmsDocument[]\n  get(ref: DocumentRef): CmsDocument | undefined\n  titleOf(ref: DocumentRef): string\n  /** Default `() => []` — none of the three rails carry cross-collection relation fields (v1). */\n  referenceCandidates?(collectionId: string): CmsDocument[]\n  /** Default `[schema]` — the rail's own schema is the only collection in scope. */\n  collections?: readonly CollectionDef[]\n  detailPath?(id: string): string\n  listPath?: string\n  /** Default `field => field.form?.readOnly ?? false`. */\n  isFieldReadOnly?(field: FieldDef): boolean\n  /** Principal-based tri-state — only the users rail supplies one. */\n  fieldAccess?(field: FieldDef, record?: CmsDocument): FieldAccess\n  validate(doc: CmsDocument): CmsValidationIssue[]\n  create(): DocumentRef\n}\n\n/** A rail's input to {@link useRailViewSource}: its store-facing reads/writes,\n *  capability profile, and lens projections. `TSaveResult`/`TRemoveResult` are\n *  each rail's own store-result shape — reconciled to `lastError` by the\n *  rail's own `normalizeSaveResult`/`normalizeRemoveResult`. */\nexport interface RailAdapter<TSaveResult, TRemoveResult> extends RailViewSourceCore {\n  save(doc: CmsDocument): Promise<TSaveResult>\n  remove(ref: DocumentRef): Promise<TRemoveResult>\n  normalizeSaveResult(result: TSaveResult): OperationError | null\n  normalizeRemoveResult(result: TRemoveResult): OperationError | null\n}\n\n/** The already-resolved state + error-wrapped writes {@link useRailViewSource}\n *  hands to the pure assembly function below. */\ninterface RailViewSourceAssemblyInput extends RailViewSourceCore {\n  lastError: OperationError | null\n  clearLastError(): void\n  viewState: TableViewState\n  setViewState: CollectionViewSource['setViewState']\n  save(doc: CmsDocument): void\n  remove(ref: DocumentRef): void\n}\n\n/**\n * Pure assembly of a {@link CollectionViewSource} from a rail's resolved\n * fields + state. Exported (and taking plain data/functions, no hook) so it is\n * directly unit-testable — this workspace runs vitest in `environment: 'node'`\n * (no `renderHook`); {@link useRailViewSource} is a thin `useState`/`useMemo`\n * wrapper around it.\n */\nexport function assembleRailViewSource(input: RailViewSourceAssemblyInput): CollectionViewSource {\n  const {\n    projectId,\n    schema,\n    capabilities,\n    localeConfig,\n    documents,\n    get,\n    titleOf,\n    referenceCandidates,\n    collections,\n    detailPath,\n    listPath,\n    isFieldReadOnly,\n    fieldAccess,\n    validate,\n    create,\n    lastError,\n    clearLastError,\n    viewState,\n    setViewState,\n    save,\n    remove,\n  } = input\n  return {\n    collectionId: schema.id,\n    schema,\n    capabilities,\n    projectId,\n    localeConfig,\n    activeLocale: localeConfig.default,\n    documents,\n    get,\n    titleOf,\n    referenceCandidates: referenceCandidates ?? (() => []),\n    collections: collections ?? [schema],\n    ...(detailPath ? { detailPath } : {}),\n    ...(listPath !== undefined ? { listPath } : {}),\n    isFieldReadOnly: isFieldReadOnly ?? ((field: FieldDef) => field.form?.readOnly ?? false),\n    ...(fieldAccess ? { fieldAccess } : {}),\n    validate,\n    lastError,\n    clearLastError,\n    viewState: () => viewState,\n    setViewState,\n    create,\n    save,\n    remove,\n  }\n}\n\n/**\n * The shared scaffold factory (EC-327) behind the assets/users/redirects rail\n * `CollectionViewSource` hooks: `viewState`/`lastError` state, the\n * `setViewState` updater-fn wrapper, the error-mapped save/remove wiring (via\n * the rail's own result normalizer), and the final assembled source. See the\n * module doc for what stays a per-rail parameter rather than being absorbed\n * here.\n */\nexport function useRailViewSource<TSaveResult, TRemoveResult>(\n  adapter: RailAdapter<TSaveResult, TRemoveResult>,\n): CollectionViewSource {\n  const {\n    projectId,\n    schema,\n    capabilities,\n    localeConfig,\n    documents,\n    get,\n    titleOf,\n    referenceCandidates,\n    collections,\n    detailPath,\n    listPath,\n    isFieldReadOnly,\n    fieldAccess,\n    validate,\n    create,\n    save: rawSave,\n    remove: rawRemove,\n    normalizeSaveResult,\n    normalizeRemoveResult,\n  } = adapter\n\n  const [viewState, setViewStateRaw] = useState<TableViewState>(() => defaultViewState(schema))\n  const [lastError, setLastError] = useState<OperationError | null>(null)\n\n  const setViewState = useCallback<CollectionViewSource['setViewState']>((update) => {\n    setViewStateRaw((prev) => (typeof update === 'function' ? update(prev) : update))\n  }, [])\n  const clearLastError = useCallback(() => setLastError(null), [])\n\n  const save = useCallback(createErrorMappedWriter(rawSave, normalizeSaveResult, setLastError), [\n    rawSave,\n    normalizeSaveResult,\n  ])\n  const remove = useCallback(\n    createErrorMappedWriter(rawRemove, normalizeRemoveResult, setLastError),\n    [rawRemove, normalizeRemoveResult],\n  )\n\n  return useMemo(\n    () =>\n      assembleRailViewSource({\n        projectId,\n        schema,\n        capabilities,\n        localeConfig,\n        documents,\n        get,\n        titleOf,\n        referenceCandidates,\n        collections,\n        detailPath,\n        listPath,\n        isFieldReadOnly,\n        fieldAccess,\n        validate,\n        create,\n        lastError,\n        clearLastError,\n        viewState,\n        setViewState,\n        save,\n        remove,\n      }),\n    [\n      projectId,\n      schema,\n      capabilities,\n      localeConfig,\n      documents,\n      get,\n      titleOf,\n      referenceCandidates,\n      collections,\n      detailPath,\n      listPath,\n      isFieldReadOnly,\n      fieldAccess,\n      validate,\n      create,\n      lastError,\n      clearLastError,\n      viewState,\n      setViewState,\n      save,\n      remove,\n    ],\n  )\n}\n"]}
+{"version":3,"file":"rail-view-source.js","sourceRoot":"","sources":["../../src/components/rail-view-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAWtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAOlE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AA4BlD;0EAC0E;AAC1E,MAAM,UAAU,iBAAiB,CAAC,MAAgB;IAChD,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAA;AACxE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAA+B,EAC/B,cAAmC;IAEnC,MAAM,IAAI,GAA4B,EAAE,CAAA;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IACjD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;gFAEgF;AAChF,MAAM,UAAU,uBAAuB,CACrC,KAAsC,EACtC,SAAqD,EACrD,QAAyC;IAEzC,OAAO,CAAC,GAAS,EAAE,EAAE;QACnB,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YAC9B,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;YAC/B,IAAI,KAAK;gBAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC5B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA;AACH,CAAC;AAmBD;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAoB,EACpB,GAAsB,EACtB,MAAkB,EAClB,QAAuB;IAEvB,OAAO,aAAa,CAClB;QACE,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,qEAAqE;QACrE,yEAAyE;QACzE,wEAAwE;QACxE,yBAAyB;QACzB,UAAU,EAAE,GAAG,EAAE,CAAC,SAAS;QAC3B,WAAW,EAAE,GAAG,EAAE,CAAC,SAAS;QAC5B,QAAQ,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,CAC5B,UAAU,KAAK,QAAQ;YACrB,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC;YAC5B,CAAC,CAAC,OAAO,CAAC,OAAO,CAA2B;gBACxC,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,QAAQ,UAAU,iCAAiC;iBAC7D;aACF,CAAC;KACT,EACD,KAAK,CAAC,YAAY,EAClB,GAAG,EACH,MAAM,EACN,QAAQ,CACT,CAAA;AACH,CAAC;AAsED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAkC;IACvE,MAAM,EACJ,SAAS,EACT,MAAM,EACN,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,GAAG,EACH,OAAO,EACP,mBAAmB,EACnB,WAAW,EACX,UAAU,EACV,QAAQ,EACR,eAAe,EACf,WAAW,EACX,eAAe,EACf,QAAQ,EACR,MAAM,EACN,SAAS,EACT,cAAc,EACd,SAAS,EACT,YAAY,EACZ,IAAI,EACJ,MAAM,EACN,IAAI,GACL,GAAG,KAAK,CAAA;IACT,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,EAAE;QACvB,MAAM;QACN,YAAY;QACZ,SAAS;QACT,YAAY;QACZ,YAAY,EAAE,YAAY,CAAC,OAAO;QAClC,SAAS;QACT,GAAG;QACH,OAAO;QACP,mBAAmB,EAAE,mBAAmB,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QACtD,WAAW,EAAE,WAAW,IAAI,CAAC,MAAM,CAAC;QACpC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,eAAe,EAAE,eAAe,IAAI,CAAC,CAAC,KAAe,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,IAAI,KAAK,CAAC;QACxF,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,QAAQ;QACR,SAAS;QACT,cAAc;QACd,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS;QAC1B,YAAY;QACZ,MAAM;QACN,IAAI;QACJ,MAAM;QACN,8EAA8E;QAC9E,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/C,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAgD;IAEhD,MAAM,EACJ,SAAS,EACT,MAAM,EACN,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,GAAG,EACH,OAAO,EACP,mBAAmB,EACnB,WAAW,EACX,UAAU,EACV,QAAQ,EACR,eAAe,EACf,WAAW,EACX,eAAe,EACf,QAAQ,EACR,MAAM,EACN,IAAI,EAAE,OAAO,EACb,MAAM,EAAE,SAAS,EACjB,UAAU,EACV,mBAAmB,EACnB,qBAAqB,GACtB,GAAG,OAAO,CAAA;IAEX,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAiB,GAAG,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAA;IAC7F,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAwB,IAAI,CAAC,CAAA;IAEvE,MAAM,YAAY,GAAG,WAAW,CAAuC,CAAC,MAAM,EAAE,EAAE;QAChF,eAAe,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;IACnF,CAAC,EAAE,EAAE,CAAC,CAAA;IACN,MAAM,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;IAEhE,MAAM,IAAI,GAAG,WAAW,CAAC,uBAAuB,CAAC,OAAO,EAAE,mBAAmB,EAAE,YAAY,CAAC,EAAE;QAC5F,OAAO;QACP,mBAAmB;KACpB,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,WAAW,CACxB,uBAAuB,CAAC,SAAS,EAAE,qBAAqB,EAAE,YAAY,CAAC,EACvE,CAAC,SAAS,EAAE,qBAAqB,CAAC,CACnC,CAAA;IAED,2EAA2E;IAC3E,uEAAuE;IACvE,6EAA6E;IAC7E,0EAA0E;IAC1E,MAAM,IAAI,GAAG,WAAW,CACtB,CAAC,GAAsB,EAAE,MAAkB,EAAE,QAAuB,EAAuB,EAAE,CAC3F,iBAAiB,CACf;QACE,YAAY,EAAE,MAAM,CAAC,EAAE;QACvB,SAAS,EAAE,SAAS,EAAE;QACtB,OAAO;QACP,QAAQ;QACR,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,IAAI,SAAS,CAAC,CAAC,GAAG,CAAC,CAAA;YACnD,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAA;YAC3C,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;QACtE,CAAC;KACF,EACD,GAAG,EACH,MAAM,EACN,QAAQ,CACT,EACH,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,qBAAqB,CAAC,CACxF,CAAA;IAED,OAAO,OAAO,CACZ,GAAG,EAAE,CACH,sBAAsB,CAAC;QACrB,SAAS;QACT,MAAM;QACN,YAAY;QACZ,YAAY;QACZ,SAAS;QACT,GAAG;QACH,OAAO;QACP,mBAAmB;QACnB,WAAW;QACX,UAAU;QACV,QAAQ;QACR,eAAe;QACf,WAAW;QACX,eAAe;QACf,QAAQ;QACR,MAAM;QACN,SAAS;QACT,cAAc;QACd,SAAS;QACT,YAAY;QACZ,IAAI;QACJ,MAAM;QACN,IAAI;KACL,CAAC,EACJ;QACE,SAAS;QACT,MAAM;QACN,YAAY;QACZ,YAAY;QACZ,SAAS;QACT,GAAG;QACH,OAAO;QACP,mBAAmB;QACnB,WAAW;QACX,UAAU;QACV,QAAQ;QACR,eAAe;QACf,WAAW;QACX,eAAe;QACf,QAAQ;QACR,MAAM;QACN,SAAS;QACT,cAAc;QACd,SAAS;QACT,YAAY;QACZ,IAAI;QACJ,MAAM;QACN,IAAI;KACL,CACF,CAAA;AACH,CAAC","sourcesContent":["import { useCallback, useMemo, useState } from 'react'\nimport type {\n  CmsDocument,\n  CmsValidationIssue,\n  CollectionDef,\n  DocumentRef,\n  FieldDef,\n  LocaleConfig,\n} from '@elytracms/core/cms-core'\nimport type { OperationError, OperationResult } from '@elytracms/core/operations'\nimport type { ReferenceTarget } from '@elytracms/core/persistence'\nimport { defaultViewState } from '@elytracms/studio/lib/cms-views'\nimport type { TableViewState } from '@elytracms/studio/lib/cms-views'\nimport type {\n  CollectionViewCapabilities,\n  CollectionViewSource,\n  FieldAccess,\n} from '@elytracms/studio/lib/collection-view/collection-view-source'\nimport { runBulkAction } from './cms/bulk-actions'\nimport type { BulkAction, BulkReport, BulkSetField } from './cms/bulk-actions'\n\n/**\n * The shared scaffold behind the primitive-rail `CollectionViewSource` hooks\n * (EC-327) — assets, users, redirects. All three hand-rolled identical\n * `viewState`/`lastError` state, an identical `setViewState` updater-fn\n * wrapper, an identical `if (!result.ok) setLastError(...)` error-mapping\n * shape (assets' `remove` diverges — see {@link OkResult} below), and a large\n * final `useMemo` assembling the same ~20-field {@link CollectionViewSource}.\n * The 4th rail (`useCmsCollectionViewSource`) does NOT reduplicate this — it\n * delegates to the ambient `CmsStore` — so this scaffold is scoped to the\n * three self-contained rails, not a fully generic replacement for the CMS\n * adapter.\n *\n * Genuinely divergent per-rail behaviour is a PARAMETER, never hidden here:\n * users' principal-based `fieldAccess`, users' no-op vs. redirects/assets'\n * registry-driven `validate`, redirects-only `create`, and — the one save/\n * remove result-shape mismatch — assets' `remove()` returns an\n * `outcome`-discriminated result where users/redirects use `{ ok }`; each rail\n * supplies its own `normalizeSaveResult`/`normalizeRemoveResult` to reconcile\n * whichever shape its store returns into `lastError`.\n */\n\n/** The common `{ ok: true; … } | { ok: false; message }` store-result shape —\n *  users' and redirects' save/remove, and assets' `updateMetadata` (save). */\nexport type OkResult = { ok: true } | { ok: false; message: string }\n\n/** The default normalizer for an {@link OkResult}: a failure maps to a\n *  surfaced {@link OperationError}; a success maps to no error at all. */\nexport function normalizeOkResult(result: OkResult): OperationError | null {\n  return result.ok ? null : { code: 'unknown', message: result.message }\n}\n\n/**\n * Project a lens document's values into a meta bag (EC-311/EC-240/EC-303):\n * every entry whose key is NOT one of the rail's canonical/identity field\n * names round-trips through the record's open `meta` bag. Shared by the users\n * (`IDENTITY_FIELDS`) and redirects (`CANONICAL_REDIRECT_FIELDS`) rails — the\n * assets rail's projection is schema-FIELDS-driven inclusion (iterating the\n * schema's declared fields, not the document's value keys), a genuinely\n * different shape that stays bespoke in `assets-collection-view-source.ts`.\n */\nexport function metaBagProjection(\n  values: Record<string, unknown>,\n  canonicalNames: ReadonlySet<string>,\n): Record<string, unknown> {\n  const meta: Record<string, unknown> = {}\n  for (const [key, value] of Object.entries(values)) {\n    if (!canonicalNames.has(key)) meta[key] = value\n  }\n  return meta\n}\n\n/** Wrap a raw store write (save/remove) so a normalized failure surfaces via\n *  `setError` — the factory's error-mapping plumbing, pulled out as a plain\n *  function (no hook) so it is unit-testable without a `renderHook` harness. */\nexport function createErrorMappedWriter<TArg, TResult>(\n  write: (arg: TArg) => Promise<TResult>,\n  normalize: (result: TResult) => OperationError | null,\n  setError: (error: OperationError) => void,\n): (arg: TArg) => void {\n  return (arg: TArg) => {\n    void write(arg).then((result) => {\n      const error = normalize(result)\n      if (error) setError(error)\n    })\n  }\n}\n\n/** The store-facing input of {@link runRailBulkAction} — plain data/functions,\n *  so the rail bulk path is unit-testable without a hook harness. */\nexport interface RailBulkInput {\n  collectionId: string\n  /** Current rail rows (lens documents) — the runner's lookup + validation input. */\n  documents: readonly CmsDocument[]\n  titleOf(ref: DocumentRef): string\n  validate(doc: CmsDocument): CmsValidationIssue[]\n  /**\n   * Dispatch ONE already-confirmed delete (the EC-173 reference dialog ran\n   * before anything reaches this) and reconcile the rail store's result shape\n   * into an operation-shaped outcome — a failure here is a visible per-item\n   * failure in the report, never a swallowed one.\n   */\n  removeConfirmed(ref: DocumentRef): Promise<OperationResult<unknown>>\n}\n\n/**\n * The primitive rails' bulk runner (EC-433): the SAME `runBulkAction` machinery\n * the CMS rail uses ([[client-data-flow-one-cache]] — no parallel data flow),\n * wired to the rail's own store delete. Only `delete` is dispatchable — the\n * rails have no publish lifecycle and no bulk set-field — and an unsupported\n * action fails each item HONESTLY in the report rather than silently no-oping\n * (the exact bug this replaces: the assets rail's bulk delete confirmed into a\n * missing `source.bulk` and dropped the whole action on the floor).\n */\nexport function runRailBulkAction(\n  input: RailBulkInput,\n  ids: readonly string[],\n  action: BulkAction,\n  setField?: BulkSetField,\n): Promise<BulkReport> {\n  return runBulkAction(\n    {\n      documents: input.documents,\n      titleOf: input.titleOf,\n      validate: input.validate,\n      // A rail store patches its own cache/state inside a succeeded remove\n      // (assets/users/redirects all do), and publish/unpublish/set-field never\n      // succeed here (dispatch rejects them), so the session-apply hooks have\n      // nothing left to apply.\n      applyState: () => undefined,\n      applyDelete: () => undefined,\n      dispatch: (bulkAction, ref) =>\n        bulkAction === 'delete'\n          ? input.removeConfirmed(ref)\n          : Promise.resolve<OperationResult<unknown>>({\n              ok: false,\n              error: {\n                code: 'unknown',\n                message: `Bulk ${bulkAction} is not supported in this view.`,\n              },\n            }),\n    },\n    input.collectionId,\n    ids,\n    action,\n    setField,\n  )\n}\n\n/** The fields shared by {@link RailAdapter} and the pure assembly input —\n *  everything the factory copies straight onto the assembled source, or\n *  defaults when a rail omits it. */\ninterface RailViewSourceCore {\n  readonly projectId: string\n  readonly schema: CollectionDef\n  readonly capabilities: CollectionViewCapabilities\n  readonly localeConfig: LocaleConfig\n  documents(): CmsDocument[]\n  get(ref: DocumentRef): CmsDocument | undefined\n  titleOf(ref: DocumentRef): string\n  /** Default `() => []` — none of the three rails carry cross-collection relation fields (v1). */\n  referenceCandidates?(collectionId: string): CmsDocument[]\n  /** Default `[schema]` — the rail's own schema is the only collection in scope. */\n  collections?: readonly CollectionDef[]\n  detailPath?(id: string): string\n  listPath?: string\n  /** Default `field => field.form?.readOnly ?? false`. */\n  isFieldReadOnly?(field: FieldDef): boolean\n  /** Principal-based tri-state — only the users rail supplies one. */\n  fieldAccess?(field: FieldDef, record?: CmsDocument): FieldAccess\n  /**\n   * How this rail's records are addressed in the reference index (EC-433) —\n   * only the assets rail supplies one (`{ type: 'asset' }`); absent ⇒ the\n   * confirm dialog's default document-shaped lookup.\n   */\n  referenceTarget?(ref: DocumentRef): ReferenceTarget\n  validate(doc: CmsDocument): CmsValidationIssue[]\n  create(): DocumentRef\n}\n\n/** A rail's input to {@link useRailViewSource}: its store-facing reads/writes,\n *  capability profile, and lens projections. `TSaveResult`/`TRemoveResult` are\n *  each rail's own store-result shape — reconciled to `lastError` by the\n *  rail's own `normalizeSaveResult`/`normalizeRemoveResult`. */\nexport interface RailAdapter<TSaveResult, TRemoveResult> extends RailViewSourceCore {\n  save(doc: CmsDocument): Promise<TSaveResult>\n  remove(ref: DocumentRef): Promise<TRemoveResult>\n  /**\n   * The delete the BULK path dispatches (EC-433) — always post-confirmation\n   * (the EC-173 reference dialog ran first). Defaults to {@link remove}; the\n   * assets rail overrides it to pass `confirmInUse: true` so a confirmed bulk\n   * delete of a referenced asset actually deletes (mirroring the detail\n   * surface's confirmed delete) instead of re-blocking on the usage gate.\n   */\n  bulkRemove?(ref: DocumentRef): Promise<TRemoveResult>\n  normalizeSaveResult(result: TSaveResult): OperationError | null\n  normalizeRemoveResult(result: TRemoveResult): OperationError | null\n}\n\n/** The already-resolved state + error-wrapped writes {@link useRailViewSource}\n *  hands to the pure assembly function below. */\ninterface RailViewSourceAssemblyInput extends RailViewSourceCore {\n  lastError: OperationError | null\n  clearLastError(): void\n  viewState: TableViewState\n  setViewState: CollectionViewSource['setViewState']\n  save(doc: CmsDocument): void\n  remove(ref: DocumentRef): void\n  /**\n   * The rail bulk runner (EC-433). Assembled onto the source ONLY when\n   * `capabilities.bulk` is set — the `CollectionViewSource` contract is\n   * \"method present iff the flag is\" — so a bulk-less rail's list never\n   * half-offers the affordance.\n   */\n  bulk?: CollectionViewSource['bulk']\n}\n\n/**\n * Pure assembly of a {@link CollectionViewSource} from a rail's resolved\n * fields + state. Exported (and taking plain data/functions, no hook) so it is\n * directly unit-testable — this workspace runs vitest in `environment: 'node'`\n * (no `renderHook`); {@link useRailViewSource} is a thin `useState`/`useMemo`\n * wrapper around it.\n */\nexport function assembleRailViewSource(input: RailViewSourceAssemblyInput): CollectionViewSource {\n  const {\n    projectId,\n    schema,\n    capabilities,\n    localeConfig,\n    documents,\n    get,\n    titleOf,\n    referenceCandidates,\n    collections,\n    detailPath,\n    listPath,\n    isFieldReadOnly,\n    fieldAccess,\n    referenceTarget,\n    validate,\n    create,\n    lastError,\n    clearLastError,\n    viewState,\n    setViewState,\n    save,\n    remove,\n    bulk,\n  } = input\n  return {\n    collectionId: schema.id,\n    schema,\n    capabilities,\n    projectId,\n    localeConfig,\n    activeLocale: localeConfig.default,\n    documents,\n    get,\n    titleOf,\n    referenceCandidates: referenceCandidates ?? (() => []),\n    collections: collections ?? [schema],\n    ...(detailPath ? { detailPath } : {}),\n    ...(listPath !== undefined ? { listPath } : {}),\n    isFieldReadOnly: isFieldReadOnly ?? ((field: FieldDef) => field.form?.readOnly ?? false),\n    ...(fieldAccess ? { fieldAccess } : {}),\n    ...(referenceTarget ? { referenceTarget } : {}),\n    validate,\n    lastError,\n    clearLastError,\n    viewState: () => viewState,\n    setViewState,\n    create,\n    save,\n    remove,\n    // Present iff the capability flag is set (the CollectionViewSource contract).\n    ...(capabilities.bulk && bulk ? { bulk } : {}),\n  }\n}\n\n/**\n * The shared scaffold factory (EC-327) behind the assets/users/redirects rail\n * `CollectionViewSource` hooks: `viewState`/`lastError` state, the\n * `setViewState` updater-fn wrapper, the error-mapped save/remove wiring (via\n * the rail's own result normalizer), and the final assembled source. See the\n * module doc for what stays a per-rail parameter rather than being absorbed\n * here.\n */\nexport function useRailViewSource<TSaveResult, TRemoveResult>(\n  adapter: RailAdapter<TSaveResult, TRemoveResult>,\n): CollectionViewSource {\n  const {\n    projectId,\n    schema,\n    capabilities,\n    localeConfig,\n    documents,\n    get,\n    titleOf,\n    referenceCandidates,\n    collections,\n    detailPath,\n    listPath,\n    isFieldReadOnly,\n    fieldAccess,\n    referenceTarget,\n    validate,\n    create,\n    save: rawSave,\n    remove: rawRemove,\n    bulkRemove,\n    normalizeSaveResult,\n    normalizeRemoveResult,\n  } = adapter\n\n  const [viewState, setViewStateRaw] = useState<TableViewState>(() => defaultViewState(schema))\n  const [lastError, setLastError] = useState<OperationError | null>(null)\n\n  const setViewState = useCallback<CollectionViewSource['setViewState']>((update) => {\n    setViewStateRaw((prev) => (typeof update === 'function' ? update(prev) : update))\n  }, [])\n  const clearLastError = useCallback(() => setLastError(null), [])\n\n  const save = useCallback(createErrorMappedWriter(rawSave, normalizeSaveResult, setLastError), [\n    rawSave,\n    normalizeSaveResult,\n  ])\n  const remove = useCallback(\n    createErrorMappedWriter(rawRemove, normalizeRemoveResult, setLastError),\n    [rawRemove, normalizeRemoveResult],\n  )\n\n  // The rail bulk runner (EC-433): the shared `runBulkAction` machinery over\n  // the rail's own confirmed delete, its store result reconciled into an\n  // operation-shaped outcome (a failing remove is a visible per-item failure).\n  // Assembled onto the source only when `capabilities.bulk` is set (below).\n  const bulk = useCallback(\n    (ids: readonly string[], action: BulkAction, setField?: BulkSetField): Promise<BulkReport> =>\n      runRailBulkAction(\n        {\n          collectionId: schema.id,\n          documents: documents(),\n          titleOf,\n          validate,\n          removeConfirmed: async (ref) => {\n            const result = await (bulkRemove ?? rawRemove)(ref)\n            const error = normalizeRemoveResult(result)\n            return error ? { ok: false, error } : { ok: true, value: undefined }\n          },\n        },\n        ids,\n        action,\n        setField,\n      ),\n    [schema.id, documents, titleOf, validate, bulkRemove, rawRemove, normalizeRemoveResult],\n  )\n\n  return useMemo(\n    () =>\n      assembleRailViewSource({\n        projectId,\n        schema,\n        capabilities,\n        localeConfig,\n        documents,\n        get,\n        titleOf,\n        referenceCandidates,\n        collections,\n        detailPath,\n        listPath,\n        isFieldReadOnly,\n        fieldAccess,\n        referenceTarget,\n        validate,\n        create,\n        lastError,\n        clearLastError,\n        viewState,\n        setViewState,\n        save,\n        remove,\n        bulk,\n      }),\n    [\n      projectId,\n      schema,\n      capabilities,\n      localeConfig,\n      documents,\n      get,\n      titleOf,\n      referenceCandidates,\n      collections,\n      detailPath,\n      listPath,\n      isFieldReadOnly,\n      fieldAccess,\n      referenceTarget,\n      validate,\n      create,\n      lastError,\n      clearLastError,\n      viewState,\n      setViewState,\n      save,\n      remove,\n      bulk,\n    ],\n  )\n}\n"]}

package/dist/components/redirects/redirects-collection-view-source.d.ts

@@ -18,8 +18,9 @@ export declare function documentToSaveRedirect(doc: CmsDocument): SaveRedirectIn
  * the portable list/edit surfaces over the editorial redirects store instead of
  * the CMS store. Redirects are CONTENT (an editor owns them), so unlike the users
  * rail this source allows `create`, is NOT admin-only, and needs no principal
- * field-access policy. No publish/versions/locales/inline/bulk/import — a redirect
- * is a small record saved explicitly (a saved+enabled one is live).
+ * field-access policy. No publish/versions/locales/inline/import — a redirect
+ * is a small record saved explicitly (a saved+enabled one is live); bulk
+ * delete rides the shared rail runner (EC-433).
  *
  * Must be mounted under a `RedirectsProvider` (for {@link useRedirects}).
  *

package/dist/components/redirects/redirects-collection-view-source.js

@@ -24,7 +24,7 @@ export const REDIRECT_COLLECTION_CAPABILITIES = {
     inlineEdit: false,
     create: true, // editors create redirects
     remove: true,
-    bulk: false,
+    bulk: true, // EC-433: bulk delete = the same per-id remove, honestly reported
     liveUrl: false,
     hierarchy: false,
     importExport: false,
@@ -74,8 +74,9 @@ export function documentToSaveRedirect(doc) {
  * the portable list/edit surfaces over the editorial redirects store instead of
  * the CMS store. Redirects are CONTENT (an editor owns them), so unlike the users
  * rail this source allows `create`, is NOT admin-only, and needs no principal
- * field-access policy. No publish/versions/locales/inline/bulk/import — a redirect
- * is a small record saved explicitly (a saved+enabled one is live).
+ * field-access policy. No publish/versions/locales/inline/import — a redirect
+ * is a small record saved explicitly (a saved+enabled one is live); bulk
+ * delete rides the shared rail runner (EC-433).
  *
  * Must be mounted under a `RedirectsProvider` (for {@link useRedirects}).
  *

package/dist/components/redirects/redirects-collection-view-source.js.map

@@ -1 +1 @@
-{"version":3,"file":"redirects-collection-view-source.js","sourceRoot":"","sources":["../../../src/components/redirects/redirects-collection-view-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,OAAO,CAAA;AAE5C,OAAO,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAErF,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAKrD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAE7F,uFAAuF;AACvF,MAAM,gBAAgB,GAAW,IAAI,CAAA;AACrC,MAAM,uBAAuB,GAAiB;IAC5C,OAAO,EAAE,gBAAgB;IACzB,OAAO,EAAE,CAAC,gBAAgB,CAAC;CAC5B,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA+B;IAC1E,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,MAAM,EAAE,IAAI,EAAE,2BAA2B;IACzC,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,KAAK;IACd,SAAS,EAAE,KAAK;IAChB,YAAY,EAAE,KAAK;IACnB,SAAS,EAAE,KAAK,EAAE,8BAA8B;CACjD,CAAA;AAED;;;;;GAKG;AACH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC,sBAAsB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;AAE3F,gEAAgE;AAChE,MAAM,UAAU,kBAAkB,CAAC,KAAoB;IACrD,OAAO;QACL,UAAU,EAAE,sBAAsB,CAAC,EAAE;QACrC,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,MAAM,EAAE;YACN,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,8EAA8E;YAC9E,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;SACtB;KACF,CAAA;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,sBAAsB,CAAC,GAAgB;IACrD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAA;IAC/B,gFAAgF;IAChF,kFAAkF;IAClF,iFAAiF;IACjF,gFAAgF;IAChF,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAA;IACjE,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QACxD,EAAE,EAAE,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;QAClD,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;QAC1E,OAAO,EAAE,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;QACpE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,gCAAgC,CAC9C,SAAiB,EACjB,SAAwB,sBAAsB;IAE9C,MAAM,KAAK,GAAG,YAAY,EAAE,CAAA;IAC5B,mFAAmF;IACnF,iFAAiF;IACjF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;IAE5E,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;IAC/F,MAAM,GAAG,GAAG,WAAW,CACrB,CAAC,GAAgB,EAA2B,EAAE;QAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAChC,OAAO,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACxD,CAAC,EACD,CAAC,KAAK,CAAC,CACR,CAAA;IACD,MAAM,OAAO,GAAG,WAAW,CACzB,CAAC,GAAgB,EAAU,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,IAAI,gBAAgB,EACzE,CAAC,KAAK,CAAC,CACR,CAAA;IACD,MAAM,QAAQ,GAAG,WAAW,CAC1B,CAAC,GAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,uBAAuB,EAAE,CAAC,EAChG,CAAC,QAAQ,CAAC,CACX,CAAA;IACD,MAAM,MAAM,GAAG,WAAW,CACxB,GAAgB,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,sBAAsB,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,EACvF,CAAC,KAAK,CAAC,CACR,CAAA;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IAChG,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IAE/E,OAAO,iBAAiB,CAAC;QACvB,SAAS;QACT,MAAM;QACN,YAAY,EAAE,gCAAgC;QAC9C,YAAY,EAAE,uBAAuB;QACrC,SAAS;QACT,GAAG;QACH,OAAO;QACP,sEAAsE;QACtE,qEAAqE;QACrE,qDAAqD;QACrD,UAAU,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,QAAQ,EAAE,UAAU,CAAC,SAAS,EAAE;QAChC,QAAQ;QACR,MAAM;QACN,IAAI;QACJ,MAAM;QACN,mBAAmB,EAAE,iBAAiB;QACtC,qBAAqB,EAAE,iBAAiB;KACzC,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { useCallback, useMemo } from 'react'\nimport type { CmsDocument, CollectionDef, DocumentRef, Locale, LocaleConfig } from '@elytracms/core/cms-core'\nimport { createCollectionRegistry, validateDocument } from '@elytracms/core/cms-core'\nimport type { RedirectEntry, SaveRedirectInput } from '@elytracms/core/persistence'\nimport { studioPath } from '@elytracms/studio/router'\nimport type {\n  CollectionViewCapabilities,\n  CollectionViewSource,\n} from '@elytracms/studio/lib/collection-view/collection-view-source'\nimport { useRedirects } from './redirects-store'\nimport { redirectsCollectionDef } from './redirects-schema'\nimport { metaBagProjection, normalizeOkResult, useRailViewSource } from '../rail-view-source'\n\n/** The redirects rail is not localized — one implicit locale keeps the lens honest. */\nconst REDIRECTS_LOCALE: Locale = 'en'\nconst REDIRECTS_LOCALE_CONFIG: LocaleConfig = {\n  default: REDIRECTS_LOCALE,\n  locales: [REDIRECTS_LOCALE],\n}\n\n/**\n * The capability profile of the redirects rail (EC-303): content-gated, create\n * + remove, no publish/versions/locales — redirects are CONTENT (an editor\n * owns them), so unlike the users rail this source allows `create`, is NOT\n * admin-only, and needs no principal field-access policy. Hoisted to a\n * module-level constant (EC-327), mirroring `ASSET_COLLECTION_CAPABILITIES`.\n */\nexport const REDIRECT_COLLECTION_CAPABILITIES: CollectionViewCapabilities = {\n  publish: false,\n  versions: false,\n  locales: false,\n  inlineEdit: false,\n  create: true, // editors create redirects\n  remove: true,\n  bulk: false,\n  liveUrl: false,\n  hierarchy: false,\n  importExport: false,\n  adminOnly: false, // content, not administration\n}\n\n/**\n * The canonical redirect fields — the storage/delivery contract of the primitive\n * rail. Anything a mount adds via *additive* `nav.redirects({ fields })` (EC-311\n * Tier 2) is by definition NOT one of these, so its value round-trips through the\n * record's open `meta` bag. Derived from the built-in def so the two never drift.\n */\nconst CANONICAL_REDIRECT_FIELDS = new Set(redirectsCollectionDef.fields.map((f) => f.name))\n\n/** Project a stored redirect into the lens's `values` shape. */\nexport function redirectToDocument(entry: RedirectEntry): CmsDocument {\n  return {\n    collection: redirectsCollectionDef.id,\n    id: entry.id,\n    values: {\n      from: entry.from,\n      to: entry.to,\n      permanent: entry.permanent,\n      enabled: entry.enabled,\n      // EC-311 Tier 2: additive schema fields round-trip through the open meta bag.\n      ...(entry.meta ?? {}),\n    },\n  }\n}\n\n/** Map an edited lens document back to the redirect write contract. */\nexport function documentToSaveRedirect(doc: CmsDocument): SaveRedirectInput {\n  const values = doc.values ?? {}\n  // EC-311 Tier 2: any value keyed outside the canonical set comes from a mount's\n  // additive `nav.redirects({ fields })` override — persist it in the meta bag. The\n  // editor holds the complete additive set, so this is the whole bag (replace, not\n  // merge). Omit `meta` entirely for the default rail so its saves are unchanged.\n  const meta = metaBagProjection(values, CANONICAL_REDIRECT_FIELDS)\n  return {\n    id: doc.id,\n    from: typeof values.from === 'string' ? values.from : '',\n    to: typeof values.to === 'string' ? values.to : '',\n    permanent: typeof values.permanent === 'boolean' ? values.permanent : true,\n    enabled: typeof values.enabled === 'boolean' ? values.enabled : true,\n    ...(Object.keys(meta).length > 0 ? { meta } : {}),\n  }\n}\n\n/**\n * Assemble a {@link CollectionViewSource} for the **redirects rail** (EC-303) —\n * the portable list/edit surfaces over the editorial redirects store instead of\n * the CMS store. Redirects are CONTENT (an editor owns them), so unlike the users\n * rail this source allows `create`, is NOT admin-only, and needs no principal\n * field-access policy. No publish/versions/locales/inline/bulk/import — a redirect\n * is a small record saved explicitly (a saved+enabled one is live).\n *\n * Must be mounted under a `RedirectsProvider` (for {@link useRedirects}).\n *\n * `schema` defaults to the engine-owned {@link redirectsCollectionDef}; a mount may\n * pass a customized def (EC-311 — built-in fields overridden by equal name via\n * `nav.redirects({ fields })`). The canonical `from`/`to`/`permanent`/`enabled`\n * names+types are contract-locked, so the projection helpers still read the same\n * canonical values; a mount's *additive* fields (Tier 2) round-trip through the\n * record's open `meta` bag ({@link documentToSaveRedirect}/{@link redirectToDocument}).\n *\n * The shared scaffold (`useRailViewSource`, EC-327) owns `viewState`/`lastError`\n * plumbing and the assembled source; this hook supplies only the redirects-store\n * reads/writes, the capability profile, and the registry-driven `validate`.\n */\nexport function useRedirectsCollectionViewSource(\n  projectId: string,\n  schema: CollectionDef = redirectsCollectionDef,\n): CollectionViewSource {\n  const store = useRedirects()\n  // EC-311: run the (possibly customized) schema's validation — required/pattern and\n  // custom `validate` fns on an overridden field must actually fire in the editor.\n  const registry = useMemo(() => createCollectionRegistry([schema]), [schema])\n\n  const documents = useCallback(() => store.redirects.map(redirectToDocument), [store.redirects])\n  const get = useCallback(\n    (ref: DocumentRef): CmsDocument | undefined => {\n      const record = store.get(ref.id)\n      return record ? redirectToDocument(record) : undefined\n    },\n    [store],\n  )\n  const titleOf = useCallback(\n    (ref: DocumentRef): string => store.get(ref.id)?.from || '(new redirect)',\n    [store],\n  )\n  const validate = useCallback(\n    (doc: CmsDocument) => validateDocument(registry, doc, { localeConfig: REDIRECTS_LOCALE_CONFIG }),\n    [registry],\n  )\n  const create = useCallback(\n    (): DocumentRef => ({ collection: redirectsCollectionDef.id, id: store.createDraft() }),\n    [store],\n  )\n  const save = useCallback((doc: CmsDocument) => store.save(documentToSaveRedirect(doc)), [store])\n  const remove = useCallback((ref: DocumentRef) => store.remove(ref.id), [store])\n\n  return useRailViewSource({\n    projectId,\n    schema,\n    capabilities: REDIRECT_COLLECTION_CAPABILITIES,\n    localeConfig: REDIRECTS_LOCALE_CONFIG,\n    documents,\n    get,\n    titleOf,\n    // No `referenceCandidates`/`collections` override: redirects carry no\n    // relation/asset fields, so nothing cross-collection to resolve (the\n    // factory's `() => []` / `[schema]` defaults apply).\n    detailPath: (id: string) => studioPath.redirect(id),\n    listPath: studioPath.redirects(),\n    validate,\n    create,\n    save,\n    remove,\n    normalizeSaveResult: normalizeOkResult,\n    normalizeRemoveResult: normalizeOkResult,\n  })\n}\n"]}
+{"version":3,"file":"redirects-collection-view-source.js","sourceRoot":"","sources":["../../../src/components/redirects/redirects-collection-view-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,OAAO,CAAA;AAE5C,OAAO,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAErF,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAKrD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAE7F,uFAAuF;AACvF,MAAM,gBAAgB,GAAW,IAAI,CAAA;AACrC,MAAM,uBAAuB,GAAiB;IAC5C,OAAO,EAAE,gBAAgB;IACzB,OAAO,EAAE,CAAC,gBAAgB,CAAC;CAC5B,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA+B;IAC1E,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,MAAM,EAAE,IAAI,EAAE,2BAA2B;IACzC,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,IAAI,EAAE,kEAAkE;IAC9E,OAAO,EAAE,KAAK;IACd,SAAS,EAAE,KAAK;IAChB,YAAY,EAAE,KAAK;IACnB,SAAS,EAAE,KAAK,EAAE,8BAA8B;CACjD,CAAA;AAED;;;;;GAKG;AACH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC,sBAAsB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;AAE3F,gEAAgE;AAChE,MAAM,UAAU,kBAAkB,CAAC,KAAoB;IACrD,OAAO;QACL,UAAU,EAAE,sBAAsB,CAAC,EAAE;QACrC,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,MAAM,EAAE;YACN,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,8EAA8E;YAC9E,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;SACtB;KACF,CAAA;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,sBAAsB,CAAC,GAAgB;IACrD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAA;IAC/B,gFAAgF;IAChF,kFAAkF;IAClF,iFAAiF;IACjF,gFAAgF;IAChF,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAA;IACjE,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QACxD,EAAE,EAAE,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;QAClD,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;QAC1E,OAAO,EAAE,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;QACpE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,gCAAgC,CAC9C,SAAiB,EACjB,SAAwB,sBAAsB;IAE9C,MAAM,KAAK,GAAG,YAAY,EAAE,CAAA;IAC5B,mFAAmF;IACnF,iFAAiF;IACjF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;IAE5E,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;IAC/F,MAAM,GAAG,GAAG,WAAW,CACrB,CAAC,GAAgB,EAA2B,EAAE;QAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAChC,OAAO,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACxD,CAAC,EACD,CAAC,KAAK,CAAC,CACR,CAAA;IACD,MAAM,OAAO,GAAG,WAAW,CACzB,CAAC,GAAgB,EAAU,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,IAAI,gBAAgB,EACzE,CAAC,KAAK,CAAC,CACR,CAAA;IACD,MAAM,QAAQ,GAAG,WAAW,CAC1B,CAAC,GAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,uBAAuB,EAAE,CAAC,EAChG,CAAC,QAAQ,CAAC,CACX,CAAA;IACD,MAAM,MAAM,GAAG,WAAW,CACxB,GAAgB,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,sBAAsB,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,EACvF,CAAC,KAAK,CAAC,CACR,CAAA;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IAChG,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IAE/E,OAAO,iBAAiB,CAAC;QACvB,SAAS;QACT,MAAM;QACN,YAAY,EAAE,gCAAgC;QAC9C,YAAY,EAAE,uBAAuB;QACrC,SAAS;QACT,GAAG;QACH,OAAO;QACP,sEAAsE;QACtE,qEAAqE;QACrE,qDAAqD;QACrD,UAAU,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,QAAQ,EAAE,UAAU,CAAC,SAAS,EAAE;QAChC,QAAQ;QACR,MAAM;QACN,IAAI;QACJ,MAAM;QACN,mBAAmB,EAAE,iBAAiB;QACtC,qBAAqB,EAAE,iBAAiB;KACzC,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { useCallback, useMemo } from 'react'\nimport type { CmsDocument, CollectionDef, DocumentRef, Locale, LocaleConfig } from '@elytracms/core/cms-core'\nimport { createCollectionRegistry, validateDocument } from '@elytracms/core/cms-core'\nimport type { RedirectEntry, SaveRedirectInput } from '@elytracms/core/persistence'\nimport { studioPath } from '@elytracms/studio/router'\nimport type {\n  CollectionViewCapabilities,\n  CollectionViewSource,\n} from '@elytracms/studio/lib/collection-view/collection-view-source'\nimport { useRedirects } from './redirects-store'\nimport { redirectsCollectionDef } from './redirects-schema'\nimport { metaBagProjection, normalizeOkResult, useRailViewSource } from '../rail-view-source'\n\n/** The redirects rail is not localized — one implicit locale keeps the lens honest. */\nconst REDIRECTS_LOCALE: Locale = 'en'\nconst REDIRECTS_LOCALE_CONFIG: LocaleConfig = {\n  default: REDIRECTS_LOCALE,\n  locales: [REDIRECTS_LOCALE],\n}\n\n/**\n * The capability profile of the redirects rail (EC-303): content-gated, create\n * + remove, no publish/versions/locales — redirects are CONTENT (an editor\n * owns them), so unlike the users rail this source allows `create`, is NOT\n * admin-only, and needs no principal field-access policy. Hoisted to a\n * module-level constant (EC-327), mirroring `ASSET_COLLECTION_CAPABILITIES`.\n */\nexport const REDIRECT_COLLECTION_CAPABILITIES: CollectionViewCapabilities = {\n  publish: false,\n  versions: false,\n  locales: false,\n  inlineEdit: false,\n  create: true, // editors create redirects\n  remove: true,\n  bulk: true, // EC-433: bulk delete = the same per-id remove, honestly reported\n  liveUrl: false,\n  hierarchy: false,\n  importExport: false,\n  adminOnly: false, // content, not administration\n}\n\n/**\n * The canonical redirect fields — the storage/delivery contract of the primitive\n * rail. Anything a mount adds via *additive* `nav.redirects({ fields })` (EC-311\n * Tier 2) is by definition NOT one of these, so its value round-trips through the\n * record's open `meta` bag. Derived from the built-in def so the two never drift.\n */\nconst CANONICAL_REDIRECT_FIELDS = new Set(redirectsCollectionDef.fields.map((f) => f.name))\n\n/** Project a stored redirect into the lens's `values` shape. */\nexport function redirectToDocument(entry: RedirectEntry): CmsDocument {\n  return {\n    collection: redirectsCollectionDef.id,\n    id: entry.id,\n    values: {\n      from: entry.from,\n      to: entry.to,\n      permanent: entry.permanent,\n      enabled: entry.enabled,\n      // EC-311 Tier 2: additive schema fields round-trip through the open meta bag.\n      ...(entry.meta ?? {}),\n    },\n  }\n}\n\n/** Map an edited lens document back to the redirect write contract. */\nexport function documentToSaveRedirect(doc: CmsDocument): SaveRedirectInput {\n  const values = doc.values ?? {}\n  // EC-311 Tier 2: any value keyed outside the canonical set comes from a mount's\n  // additive `nav.redirects({ fields })` override — persist it in the meta bag. The\n  // editor holds the complete additive set, so this is the whole bag (replace, not\n  // merge). Omit `meta` entirely for the default rail so its saves are unchanged.\n  const meta = metaBagProjection(values, CANONICAL_REDIRECT_FIELDS)\n  return {\n    id: doc.id,\n    from: typeof values.from === 'string' ? values.from : '',\n    to: typeof values.to === 'string' ? values.to : '',\n    permanent: typeof values.permanent === 'boolean' ? values.permanent : true,\n    enabled: typeof values.enabled === 'boolean' ? values.enabled : true,\n    ...(Object.keys(meta).length > 0 ? { meta } : {}),\n  }\n}\n\n/**\n * Assemble a {@link CollectionViewSource} for the **redirects rail** (EC-303) —\n * the portable list/edit surfaces over the editorial redirects store instead of\n * the CMS store. Redirects are CONTENT (an editor owns them), so unlike the users\n * rail this source allows `create`, is NOT admin-only, and needs no principal\n * field-access policy. No publish/versions/locales/inline/import — a redirect\n * is a small record saved explicitly (a saved+enabled one is live); bulk\n * delete rides the shared rail runner (EC-433).\n *\n * Must be mounted under a `RedirectsProvider` (for {@link useRedirects}).\n *\n * `schema` defaults to the engine-owned {@link redirectsCollectionDef}; a mount may\n * pass a customized def (EC-311 — built-in fields overridden by equal name via\n * `nav.redirects({ fields })`). The canonical `from`/`to`/`permanent`/`enabled`\n * names+types are contract-locked, so the projection helpers still read the same\n * canonical values; a mount's *additive* fields (Tier 2) round-trip through the\n * record's open `meta` bag ({@link documentToSaveRedirect}/{@link redirectToDocument}).\n *\n * The shared scaffold (`useRailViewSource`, EC-327) owns `viewState`/`lastError`\n * plumbing and the assembled source; this hook supplies only the redirects-store\n * reads/writes, the capability profile, and the registry-driven `validate`.\n */\nexport function useRedirectsCollectionViewSource(\n  projectId: string,\n  schema: CollectionDef = redirectsCollectionDef,\n): CollectionViewSource {\n  const store = useRedirects()\n  // EC-311: run the (possibly customized) schema's validation — required/pattern and\n  // custom `validate` fns on an overridden field must actually fire in the editor.\n  const registry = useMemo(() => createCollectionRegistry([schema]), [schema])\n\n  const documents = useCallback(() => store.redirects.map(redirectToDocument), [store.redirects])\n  const get = useCallback(\n    (ref: DocumentRef): CmsDocument | undefined => {\n      const record = store.get(ref.id)\n      return record ? redirectToDocument(record) : undefined\n    },\n    [store],\n  )\n  const titleOf = useCallback(\n    (ref: DocumentRef): string => store.get(ref.id)?.from || '(new redirect)',\n    [store],\n  )\n  const validate = useCallback(\n    (doc: CmsDocument) => validateDocument(registry, doc, { localeConfig: REDIRECTS_LOCALE_CONFIG }),\n    [registry],\n  )\n  const create = useCallback(\n    (): DocumentRef => ({ collection: redirectsCollectionDef.id, id: store.createDraft() }),\n    [store],\n  )\n  const save = useCallback((doc: CmsDocument) => store.save(documentToSaveRedirect(doc)), [store])\n  const remove = useCallback((ref: DocumentRef) => store.remove(ref.id), [store])\n\n  return useRailViewSource({\n    projectId,\n    schema,\n    capabilities: REDIRECT_COLLECTION_CAPABILITIES,\n    localeConfig: REDIRECTS_LOCALE_CONFIG,\n    documents,\n    get,\n    titleOf,\n    // No `referenceCandidates`/`collections` override: redirects carry no\n    // relation/asset fields, so nothing cross-collection to resolve (the\n    // factory's `() => []` / `[schema]` defaults apply).\n    detailPath: (id: string) => studioPath.redirect(id),\n    listPath: studioPath.redirects(),\n    validate,\n    create,\n    save,\n    remove,\n    normalizeSaveResult: normalizeOkResult,\n    normalizeRemoveResult: normalizeOkResult,\n  })\n}\n"]}

package/dist/components/session-expired-overlay.d.ts

@@ -17,7 +17,23 @@
  *
  * Stacking: `DialogBlockingContent` (EC-392 discipline) — topmost modal layer,
  * focus-trapped, Escape/outside interaction consumed, studio beneath inert.
+ *
+ * Presentation (EC-437): the sign-in card mounts BARE (no full-page opaque
+ * panel) over the stage family's translucent blurred backdrop, so the editor
+ * SEES their intact document sitting behind the prompt — showing the "your
+ * changes stay right here" promise instead of only telling it.
+ */
+/**
+ * The re-auth backdrop (EC-437) — the stage family's visual language
+ * (EC-431 AD-A, `surfaceGeometry`), borrowed as CLASSES only, never the
+ * `ExpandableSurface` component: the stage is lightly dismissible, re-auth is
+ * contractually non-dismissible (`DialogBlockingContent` stays the shell).
+ * One blur step above the stage's `backdrop-blur-sm`: the whole dense studio
+ * sits behind a small centered card here (not behind a near-full panel), and
+ * the stronger step keeps the card unmistakably focal while the studio stays
+ * clearly recognizable — judged live against `-sm` with screenshots.
  */
+export declare const SESSION_EXPIRED_BACKDROP_CLASS = "bg-background/70 backdrop-blur-md";
 export declare function SessionExpiredOverlay(): import("react").JSX.Element | null;
 /**
  * Why the sign-in screen appeared in place (EC-403): the session-expired copy

package/dist/components/session-expired-overlay.js

@@ -25,19 +25,35 @@ import { SignInScreen, activeProjectName } from './sign-in-view.js';
  *
  * Stacking: `DialogBlockingContent` (EC-392 discipline) — topmost modal layer,
  * focus-trapped, Escape/outside interaction consumed, studio beneath inert.
+ *
+ * Presentation (EC-437): the sign-in card mounts BARE (no full-page opaque
+ * panel) over the stage family's translucent blurred backdrop, so the editor
+ * SEES their intact document sitting behind the prompt — showing the "your
+ * changes stay right here" promise instead of only telling it.
+ */
+/**
+ * The re-auth backdrop (EC-437) — the stage family's visual language
+ * (EC-431 AD-A, `surfaceGeometry`), borrowed as CLASSES only, never the
+ * `ExpandableSurface` component: the stage is lightly dismissible, re-auth is
+ * contractually non-dismissible (`DialogBlockingContent` stays the shell).
+ * One blur step above the stage's `backdrop-blur-sm`: the whole dense studio
+ * sits behind a small centered card here (not behind a near-full panel), and
+ * the stronger step keeps the card unmistakably focal while the studio stays
+ * clearly recognizable — judged live against `-sm` with screenshots.
  */
+export const SESSION_EXPIRED_BACKDROP_CLASS = 'bg-background/70 backdrop-blur-md';
 export function SessionExpiredOverlay() {
     const auth = useAuth();
     const t = useT();
     const cache = useOperationCache();
     if (!auth.sessionExpired)
         return null;
-    return (_jsx(Dialog, { open: true, children: _jsxs(DialogBlockingContent, { "aria-describedby": undefined, children: [_jsx(DialogTitle, { className: "sr-only", children: t('error.sessionExpiredTitle') }), _jsx(SignInScreen, { notice: _jsx(SessionExpiredNotice, {}), projectName: activeProjectName(), showModeToggle: false, devCredentials: authMode() === 'playground' ? LOCAL_DEV_CREDENTIALS : null, authenticate: (_mode, email, password) => auth.signIn(email, password), onAuthenticated: () => 
-                    // The session was dead for an unknown span: reads may have failed
-                    // (retry: false) or gone stale. One wholesale invalidation lets
-                    // every active query refetch under the fresh session — resume,
-                    // not reload. (The empty key prefix matches all queries.)
-                    cache.invalidate([]) })] }) }));
+    return (_jsx(Dialog, { open: true, children: _jsxs(DialogBlockingContent, { "aria-describedby": undefined, overlayClassName: SESSION_EXPIRED_BACKDROP_CLASS, children: [_jsx(DialogTitle, { className: "sr-only", children: t('error.sessionExpiredTitle') }), _jsx("div", { className: "grid min-h-full place-items-center p-6", children: _jsx(SignInScreen, { layout: "bare", notice: _jsx(SessionExpiredNotice, {}), projectName: activeProjectName(), showModeToggle: false, devCredentials: authMode() === 'playground' ? LOCAL_DEV_CREDENTIALS : null, authenticate: (_mode, email, password) => auth.signIn(email, password), onAuthenticated: () => 
+                        // The session was dead for an unknown span: reads may have failed
+                        // (retry: false) or gone stale. One wholesale invalidation lets
+                        // every active query refetch under the fresh session — resume,
+                        // not reload. (The empty key prefix matches all queries.)
+                        cache.invalidate([]) }) })] }) }));
 }
 /**
  * Why the sign-in screen appeared in place (EC-403): the session-expired copy

package/dist/components/session-expired-overlay.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-expired-overlay.js","sourceRoot":"","sources":["../../src/components/session-expired-overlay.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAA;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAA;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAC/D,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AACnG,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAEhE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;IACtB,MAAM,CAAC,GAAG,IAAI,EAAE,CAAA;IAChB,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAA;IAEjC,IAAI,CAAC,IAAI,CAAC,cAAc;QAAE,OAAO,IAAI,CAAA;IAErC,OAAO,CACL,KAAC,MAAM,IAAC,IAAI,kBACV,MAAC,qBAAqB,wBAAmB,SAAS,aAChD,KAAC,WAAW,IAAC,SAAS,EAAC,SAAS,YAAE,CAAC,CAAC,2BAA2B,CAAC,GAAe,EAC/E,KAAC,YAAY,IACX,MAAM,EAAE,KAAC,oBAAoB,KAAG,EAChC,WAAW,EAAE,iBAAiB,EAAE,EAChC,cAAc,EAAE,KAAK,EACrB,cAAc,EAAE,QAAQ,EAAE,KAAK,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,EAC1E,YAAY,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,EACtE,eAAe,EAAE,GAAG,EAAE;oBACpB,kEAAkE;oBAClE,gEAAgE;oBAChE,+DAA+D;oBAC/D,0DAA0D;oBAC1D,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,GAEtB,IACoB,GACjB,CACV,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAA;IAChB,OAAO,CACL,cACE,IAAI,EAAC,OAAO,EACZ,SAAS,EAAC,qEAAqE,YAE/E,MAAC,GAAG,IAAC,GAAG,EAAC,GAAG,EAAC,KAAK,EAAC,OAAO,aACxB,KAAC,WAAW,IAAC,SAAS,EAAC,yCAAyC,GAAG,EACnE,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,EAAC,SAAS,EAAC,gBAAgB,aACvC,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,SAAS,EAAC,8BAA8B,YACrD,CAAC,CAAC,2BAA2B,CAAC,GAC1B,EACP,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,YACzB,CAAC,CAAC,sBAAsB,CAAC,GACrB,IACD,IACJ,GACF,CACP,CAAA;AACH,CAAC","sourcesContent":["import { CircleAlert } from 'lucide-react'\nimport { LOCAL_DEV_CREDENTIALS, authMode } from '@elytracms/studio/lib/auth'\nimport { useT } from '@elytracms/studio/lib/i18n'\nimport { useOperationCache } from '@elytracms/studio/lib/query'\nimport { Dialog, DialogBlockingContent, DialogTitle, Row, Stack, Text } from '@elytracms/studio/ui'\nimport { useAuth } from './auth-context'\nimport { SignInScreen, activeProjectName } from './sign-in-view'\n\n/**\n * The blocking in-place re-auth overlay (EC-403). Mounted once in the studio\n * root (inside `StudioProvider`, over every route) and shown while the auth\n * store reports `sessionExpired`: the backend session died mid-flight, so all\n * editing is blocked behind a non-dismissible modal that mounts the SAME\n * `SignInScreen` composition the `/sign-in` route uses — **without any\n * navigation**. The React tree beneath stays alive, so every unsaved editor\n * state survives; a successful sign-in applies the fresh session (clearing the\n * flag in the auth store) and editing resumes exactly where it stopped.\n * Pending failed writes keep their normal retry paths (a `persistError`\n * clears on the next successful save).\n *\n * Re-auth is strictly sign-in (no create-account toggle — a brand-new account\n * cannot resume an existing editing session). On success the studio query\n * cache is invalidated wholesale so reads that failed or staled while the\n * session was dead recover without a reload.\n *\n * Stacking: `DialogBlockingContent` (EC-392 discipline) — topmost modal layer,\n * focus-trapped, Escape/outside interaction consumed, studio beneath inert.\n */\nexport function SessionExpiredOverlay() {\n  const auth = useAuth()\n  const t = useT()\n  const cache = useOperationCache()\n\n  if (!auth.sessionExpired) return null\n\n  return (\n    <Dialog open>\n      <DialogBlockingContent aria-describedby={undefined}>\n        <DialogTitle className=\"sr-only\">{t('error.sessionExpiredTitle')}</DialogTitle>\n        <SignInScreen\n          notice={<SessionExpiredNotice />}\n          projectName={activeProjectName()}\n          showModeToggle={false}\n          devCredentials={authMode() === 'playground' ? LOCAL_DEV_CREDENTIALS : null}\n          authenticate={(_mode, email, password) => auth.signIn(email, password)}\n          onAuthenticated={() =>\n            // The session was dead for an unknown span: reads may have failed\n            // (retry: false) or gone stale. One wholesale invalidation lets\n            // every active query refetch under the fresh session — resume,\n            // not reload. (The empty key prefix matches all queries.)\n            cache.invalidate([])\n          }\n        />\n      </DialogBlockingContent>\n    </Dialog>\n  )\n}\n\n/**\n * Why the sign-in screen appeared in place (EC-403): the session-expired copy\n * rendered above the form via the `SignInScreen` notice slot. Pure — exported\n * for the provider-free static-render smoke test.\n */\nexport function SessionExpiredNotice() {\n  const t = useT()\n  return (\n    <div\n      role=\"alert\"\n      className=\"rounded-md border border-destructive/40 bg-destructive/10 px-3 py-2\"\n    >\n      <Row gap=\"2\" align=\"start\">\n        <CircleAlert className=\"mt-0.5 size-4 shrink-0 text-destructive\" />\n        <Stack gap=\"1\" className=\"min-w-0 flex-1\">\n          <Text size=\"sm\" className=\"font-medium text-destructive\">\n            {t('error.sessionExpiredTitle')}\n          </Text>\n          <Text size=\"sm\" tone=\"muted\">\n            {t('error.sessionExpired')}\n          </Text>\n        </Stack>\n      </Row>\n    </div>\n  )\n}\n"]}
+{"version":3,"file":"session-expired-overlay.js","sourceRoot":"","sources":["../../src/components/session-expired-overlay.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAA;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAA;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAC/D,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AACnG,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAEhE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,mCAAmC,CAAA;AAEjF,MAAM,UAAU,qBAAqB;IACnC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;IACtB,MAAM,CAAC,GAAG,IAAI,EAAE,CAAA;IAChB,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAA;IAEjC,IAAI,CAAC,IAAI,CAAC,cAAc;QAAE,OAAO,IAAI,CAAA;IAErC,OAAO,CACL,KAAC,MAAM,IAAC,IAAI,kBACV,MAAC,qBAAqB,wBACF,SAAS,EAC3B,gBAAgB,EAAE,8BAA8B,aAEhD,KAAC,WAAW,IAAC,SAAS,EAAC,SAAS,YAAE,CAAC,CAAC,2BAA2B,CAAC,GAAe,EAI/E,cAAK,SAAS,EAAC,wCAAwC,YACrD,KAAC,YAAY,IACX,MAAM,EAAC,MAAM,EACb,MAAM,EAAE,KAAC,oBAAoB,KAAG,EAChC,WAAW,EAAE,iBAAiB,EAAE,EAChC,cAAc,EAAE,KAAK,EACrB,cAAc,EAAE,QAAQ,EAAE,KAAK,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,EAC1E,YAAY,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,EACtE,eAAe,EAAE,GAAG,EAAE;wBACpB,kEAAkE;wBAClE,gEAAgE;wBAChE,+DAA+D;wBAC/D,0DAA0D;wBAC1D,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,GAEtB,GACE,IACgB,GACjB,CACV,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAA;IAChB,OAAO,CACL,cACE,IAAI,EAAC,OAAO,EACZ,SAAS,EAAC,qEAAqE,YAE/E,MAAC,GAAG,IAAC,GAAG,EAAC,GAAG,EAAC,KAAK,EAAC,OAAO,aACxB,KAAC,WAAW,IAAC,SAAS,EAAC,yCAAyC,GAAG,EACnE,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,EAAC,SAAS,EAAC,gBAAgB,aACvC,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,SAAS,EAAC,8BAA8B,YACrD,CAAC,CAAC,2BAA2B,CAAC,GAC1B,EACP,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,YACzB,CAAC,CAAC,sBAAsB,CAAC,GACrB,IACD,IACJ,GACF,CACP,CAAA;AACH,CAAC","sourcesContent":["import { CircleAlert } from 'lucide-react'\nimport { LOCAL_DEV_CREDENTIALS, authMode } from '@elytracms/studio/lib/auth'\nimport { useT } from '@elytracms/studio/lib/i18n'\nimport { useOperationCache } from '@elytracms/studio/lib/query'\nimport { Dialog, DialogBlockingContent, DialogTitle, Row, Stack, Text } from '@elytracms/studio/ui'\nimport { useAuth } from './auth-context'\nimport { SignInScreen, activeProjectName } from './sign-in-view'\n\n/**\n * The blocking in-place re-auth overlay (EC-403). Mounted once in the studio\n * root (inside `StudioProvider`, over every route) and shown while the auth\n * store reports `sessionExpired`: the backend session died mid-flight, so all\n * editing is blocked behind a non-dismissible modal that mounts the SAME\n * `SignInScreen` composition the `/sign-in` route uses — **without any\n * navigation**. The React tree beneath stays alive, so every unsaved editor\n * state survives; a successful sign-in applies the fresh session (clearing the\n * flag in the auth store) and editing resumes exactly where it stopped.\n * Pending failed writes keep their normal retry paths (a `persistError`\n * clears on the next successful save).\n *\n * Re-auth is strictly sign-in (no create-account toggle — a brand-new account\n * cannot resume an existing editing session). On success the studio query\n * cache is invalidated wholesale so reads that failed or staled while the\n * session was dead recover without a reload.\n *\n * Stacking: `DialogBlockingContent` (EC-392 discipline) — topmost modal layer,\n * focus-trapped, Escape/outside interaction consumed, studio beneath inert.\n *\n * Presentation (EC-437): the sign-in card mounts BARE (no full-page opaque\n * panel) over the stage family's translucent blurred backdrop, so the editor\n * SEES their intact document sitting behind the prompt — showing the \"your\n * changes stay right here\" promise instead of only telling it.\n */\n\n/**\n * The re-auth backdrop (EC-437) — the stage family's visual language\n * (EC-431 AD-A, `surfaceGeometry`), borrowed as CLASSES only, never the\n * `ExpandableSurface` component: the stage is lightly dismissible, re-auth is\n * contractually non-dismissible (`DialogBlockingContent` stays the shell).\n * One blur step above the stage's `backdrop-blur-sm`: the whole dense studio\n * sits behind a small centered card here (not behind a near-full panel), and\n * the stronger step keeps the card unmistakably focal while the studio stays\n * clearly recognizable — judged live against `-sm` with screenshots.\n */\nexport const SESSION_EXPIRED_BACKDROP_CLASS = 'bg-background/70 backdrop-blur-md'\n\nexport function SessionExpiredOverlay() {\n  const auth = useAuth()\n  const t = useT()\n  const cache = useOperationCache()\n\n  if (!auth.sessionExpired) return null\n\n  return (\n    <Dialog open>\n      <DialogBlockingContent\n        aria-describedby={undefined}\n        overlayClassName={SESSION_EXPIRED_BACKDROP_CLASS}\n      >\n        <DialogTitle className=\"sr-only\">{t('error.sessionExpiredTitle')}</DialogTitle>\n        {/* min-h-full (not h-full): when the card outgrows a short viewport,\n            the wrapper grows with it and the blocking content scrolls —\n            centered when it fits, never clipped when it doesn't. */}\n        <div className=\"grid min-h-full place-items-center p-6\">\n          <SignInScreen\n            layout=\"bare\"\n            notice={<SessionExpiredNotice />}\n            projectName={activeProjectName()}\n            showModeToggle={false}\n            devCredentials={authMode() === 'playground' ? LOCAL_DEV_CREDENTIALS : null}\n            authenticate={(_mode, email, password) => auth.signIn(email, password)}\n            onAuthenticated={() =>\n              // The session was dead for an unknown span: reads may have failed\n              // (retry: false) or gone stale. One wholesale invalidation lets\n              // every active query refetch under the fresh session — resume,\n              // not reload. (The empty key prefix matches all queries.)\n              cache.invalidate([])\n            }\n          />\n        </div>\n      </DialogBlockingContent>\n    </Dialog>\n  )\n}\n\n/**\n * Why the sign-in screen appeared in place (EC-403): the session-expired copy\n * rendered above the form via the `SignInScreen` notice slot. Pure — exported\n * for the provider-free static-render smoke test.\n */\nexport function SessionExpiredNotice() {\n  const t = useT()\n  return (\n    <div\n      role=\"alert\"\n      className=\"rounded-md border border-destructive/40 bg-destructive/10 px-3 py-2\"\n    >\n      <Row gap=\"2\" align=\"start\">\n        <CircleAlert className=\"mt-0.5 size-4 shrink-0 text-destructive\" />\n        <Stack gap=\"1\" className=\"min-w-0 flex-1\">\n          <Text size=\"sm\" className=\"font-medium text-destructive\">\n            {t('error.sessionExpiredTitle')}\n          </Text>\n          <Text size=\"sm\" tone=\"muted\">\n            {t('error.sessionExpired')}\n          </Text>\n        </Stack>\n      </Row>\n    </div>\n  )\n}\n"]}

package/dist/components/sign-in-view.d.ts

@@ -38,6 +38,15 @@ interface SignInScreenProps {
      * normal `/sign-in` route passes none.
      */
     notice?: ReactNode;
+    /**
+     * Presentation wrapper (EC-437). `'page'` (default) renders the
+     * full-viewport opaque panel — the `/sign-in` route's shipped layout,
+     * byte-identical. `'bare'` renders only the centered card column so a host
+     * surface composes its own backdrop: the session-expired re-auth overlay
+     * mounts it over a translucent blurred backdrop, keeping the intact studio
+     * visible beneath the prompt.
+     */
+    layout?: 'page' | 'bare';
     brandMark?: ReactNode;
     productName?: string;
     /** Attempt auth for the chosen mode. The container maps this to signIn/signUp. */
@@ -49,5 +58,5 @@ interface SignInScreenProps {
  * Provider-free presentational sign-in screen. Owns only local form state and
  * calls injected callbacks — no context hooks — so it static-renders in tests.
  */
-export declare function SignInScreen({ projectName, showModeToggle, devCredentials, notice, brandMark, productName, authenticate, onAuthenticated, }: SignInScreenProps): import("react").JSX.Element;
+export declare function SignInScreen({ projectName, showModeToggle, devCredentials, notice, layout, brandMark, productName, authenticate, onAuthenticated, }: SignInScreenProps): import("react").JSX.Element;
 export {};

package/dist/components/sign-in-view.js

@@ -1,4 +1,4 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { useState } from 'react';
 import { useNavigate, useSearch } from '@tanstack/react-router';
 import { Button, Card, CardContent, Field, Heading, Input, Stack, Text } from '@elytracms/studio/ui';
@@ -38,7 +38,7 @@ export function SignInView({ brandMark, productName }) {
  * Provider-free presentational sign-in screen. Owns only local form state and
  * calls injected callbacks — no context hooks — so it static-renders in tests.
  */
-export function SignInScreen({ projectName, showModeToggle, devCredentials, notice, brandMark, productName = 'Elytra', authenticate, onAuthenticated, }) {
+export function SignInScreen({ projectName, showModeToggle, devCredentials, notice, layout = 'page', brandMark, productName = 'Elytra', authenticate, onAuthenticated, }) {
     const t = useT();
     const [email, setEmail] = useState('');
     const [password, setPassword] = useState('');
@@ -66,7 +66,7 @@ export function SignInScreen({ projectName, showModeToggle, devCredentials, noti
     }
     const submitting = phase === 'submitting';
     const creating = mode === 'signup';
-    return (_jsx("div", { className: "grid min-h-dvh place-items-center bg-background p-6", children: _jsxs(Stack, { gap: "4", className: "w-full max-w-sm", children: [notice, _jsxs(Stack, { gap: "1", align: "center", children: [brandMark ?? _jsx("span", { className: "size-8 rounded-lg bg-primary shadow-sm", "aria-hidden": true }), _jsx(Heading, { size: "h2", children: creating ? t('auth.signIn.headingCreate') : t('auth.signIn.heading', { productName }) }), _jsx(Text, { size: "sm", tone: "muted", children: projectName
+    return (_jsx(ScreenShell, { layout: layout, children: _jsxs(Stack, { gap: "4", className: "w-full max-w-sm", children: [notice, _jsxs(Stack, { gap: "1", align: "center", children: [brandMark ?? _jsx("span", { className: "size-8 rounded-lg bg-primary shadow-sm", "aria-hidden": true }), _jsx(Heading, { size: "h2", children: creating ? t('auth.signIn.headingCreate') : t('auth.signIn.heading', { productName }) }), _jsx(Text, { size: "sm", tone: "muted", children: projectName
                                 ? t(creating ? 'auth.signIn.subtext.register' : 'auth.signIn.subtext.continue', {
                                     project: projectName,
                                 })
@@ -81,6 +81,17 @@ export function SignInScreen({ projectName, showModeToggle, devCredentials, noti
                                 setError(null);
                             }, children: creating ? t('auth.signIn.toggle.signIn') : t('auth.signIn.toggle.createAccount') })] })) : null, devCredentials ? _jsx(DevCredentialsHint, { entries: devCredentials }) : null] }) }));
 }
+/**
+ * The screen's presentation shell (EC-437). `'page'` is the `/sign-in`
+ * route's shipped full-viewport opaque panel, byte-identical; `'bare'`
+ * renders the card column alone — the session-expired re-auth overlay owns
+ * backdrop + centering there, so the studio stays visible beneath the prompt.
+ */
+function ScreenShell({ layout, children }) {
+    if (layout === 'bare')
+        return _jsx(_Fragment, { children: children });
+    return _jsx("div", { className: "grid min-h-dvh place-items-center bg-background p-6", children: children });
+}
 /** Seeded dev accounts for the explicit playground mode — fixtures, not secrets. */
 function DevCredentialsHint({ entries }) {
     const t = useT();

package/dist/components/sign-in-view.js.map

@@ -1 +1 @@
-{"version":3,"file":"sign-in-view.js","sourceRoot":"","sources":["../../src/components/sign-in-view.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAEhC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AACpG,OAAO,EAAE,OAAO,EAAE,MAAM,2CAA2C,CAAA;AACnE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAE9F,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAA;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAA;AACjD,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAA;AA0CzF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAA;IACjC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACxC,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAA;IACnC,MAAM,OAAO,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IAC1F,OAAO,OAAO,EAAE,IAAI,IAAI,IAAI,CAAA;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,EAAE,SAAS,EAAE,WAAW,EAAmB;IACpE,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;IACtB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;IAC9B,iFAAiF;IACjF,2EAA2E;IAC3E,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAA0B,CAAA;IACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;IAEhC,OAAO,CACL,KAAC,YAAY,IACX,WAAW,EAAE,iBAAiB,EAAE,EAChC,cAAc,EAAE,QAAQ,EAAE,KAAK,QAAQ,EACvC,cAAc,EAAE,QAAQ,EAAE,KAAK,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,EAC1E,SAAS,EAAE,SAAS,EACpB,WAAW,EAAE,WAAW,EACxB,YAAY,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CACtC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,EAEjF,eAAe,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,GACnE,CACH,CAAA;AACH,CAAC;AAsBD;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,EAC3B,WAAW,EACX,cAAc,EACd,cAAc,EACd,MAAM,EACN,SAAS,EACT,WAAW,GAAG,QAAQ,EACtB,YAAY,EACZ,eAAe,GACG;IAClB,MAAM,CAAC,GAAG,IAAI,EAAE,CAAA;IAChB,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IACtC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC5C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAY,MAAM,CAAC,CAAA;IACrD,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAW,QAAQ,CAAC,CAAA;IACpD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAA;IAEvD,KAAK,UAAU,YAAY,CAAC,KAAiC;QAC3D,KAAK,CAAC,cAAc,EAAE,CAAA;QACtB,QAAQ,CAAC,YAAY,CAAC,CAAA;QACtB,QAAQ,CAAC,IAAI,CAAC,CAAA;QACd,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;QACxD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,eAAe,EAAE,CAAA;YACvB,OAAM;QACR,CAAC;QACD,8EAA8E;QAC9E,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB;YAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;QACzD,sEAAsE;QACtE,2EAA2E;QAC3E,uDAAuD;QACvD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAA;QAC9C,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACjD,QAAQ,CAAC,MAAM,CAAC,CAAA;IAClB,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,KAAK,YAAY,CAAA;IACzC,MAAM,QAAQ,GAAG,IAAI,KAAK,QAAQ,CAAA;IAElC,OAAO,CACL,cAAK,SAAS,EAAC,qDAAqD,YAClE,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,EAAC,SAAS,EAAC,iBAAiB,aACvC,MAAM,EACP,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,EAAC,KAAK,EAAC,QAAQ,aAC1B,SAAS,IAAI,eAAM,SAAS,EAAC,wCAAwC,wBAAe,EACrF,KAAC,OAAO,IAAC,IAAI,EAAC,IAAI,YACf,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,EAAE,EAAE,WAAW,EAAE,CAAC,GAC9E,EACV,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,YACzB,WAAW;gCACV,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,8BAA8B,EAAE;oCAC5E,OAAO,EAAE,WAAW;iCACrB,CAAC;gCACJ,CAAC,CAAC,CAAC,CAAC,6BAA6B,CAAC,GAC/B,IACD,EAER,KAAC,IAAI,cACH,KAAC,WAAW,IAAC,SAAS,EAAC,MAAM,YAC3B,eAAM,QAAQ,EAAE,YAAY,EAAE,UAAU,kBACtC,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,aACZ,KAAC,KAAK,IAAC,KAAK,EAAE,CAAC,CAAC,wBAAwB,CAAC,EAAE,OAAO,EAAC,eAAe,EAAC,QAAQ,kBACzE,KAAC,KAAK,IACJ,EAAE,EAAC,eAAe,EAClB,IAAI,EAAC,OAAO,EACZ,YAAY,EAAC,OAAO,EACpB,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACzC,WAAW,EAAE,CAAC,CAAC,8BAA8B,CAAC,EAC9C,QAAQ,EAAE,UAAU,GACpB,GACI,EACR,KAAC,KAAK,IACJ,KAAK,EAAE,CAAC,CAAC,2BAA2B,CAAC,EACrC,OAAO,EAAC,kBAAkB,EAC1B,QAAQ,QACR,KAAK,EAAE,KAAK,YAEZ,KAAC,KAAK,IACJ,EAAE,EAAC,kBAAkB,EACrB,IAAI,EAAC,UAAU,EACf,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,kBAAkB,EAC5D,KAAK,EAAE,QAAQ,EACf,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAC5C,QAAQ,EAAE,UAAU,GACpB,GACI,EACR,KAAC,MAAM,IAAC,IAAI,EAAC,QAAQ,EAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAC,QAAQ,YAC3D,UAAU;4CACT,CAAC,CAAC,QAAQ;gDACR,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC;gDACnC,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC;4CAC/B,CAAC,CAAC,QAAQ;gDACR,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC;gDAC/B,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,GACtB,IACH,GACH,GACK,GACT,EAEN,cAAc,CAAC,CAAC,CAAC,CAChB,MAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,aAAa,aACjD,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC,EAAE,GAAG,EACxF,iBACE,IAAI,EAAC,QAAQ,EACb,SAAS,EAAC,6DAA6D,EACvE,OAAO,EAAE,GAAG,EAAE;gCACZ,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;gCACvC,QAAQ,CAAC,IAAI,CAAC,CAAA;4BAChB,CAAC,YAEA,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kCAAkC,CAAC,GAC3E,IACJ,CACR,CAAC,CAAC,CAAC,IAAI,EAEP,cAAc,CAAC,CAAC,CAAC,KAAC,kBAAkB,IAAC,OAAO,EAAE,cAAc,GAAI,CAAC,CAAC,CAAC,IAAI,IAClE,GACJ,CACP,CAAA;AACH,CAAC;AAED,oFAAoF;AACpF,SAAS,kBAAkB,CAAC,EAAE,OAAO,EAAyC;IAC5E,MAAM,CAAC,GAAG,IAAI,EAAE,CAAA;IAChB,OAAO,CACL,KAAC,IAAI,IAAC,SAAS,EAAC,eAAe,YAC7B,KAAC,WAAW,IAAC,SAAS,EAAC,MAAM,YAC3B,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,aACZ,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,aAAa,YACjD,CAAC,CAAC,+BAA+B,CAAC,GAC9B,EACN,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CACtB,MAAC,IAAI,IAAqB,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,WAAW,aACnE,KAAK,CAAC,IAAI,CAAC,KAAK,SAAK,KAAK,CAAC,QAAQ,KAD3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAEjB,CACR,CAAC,IACI,GACI,GACT,CACR,CAAA;AACH,CAAC","sourcesContent":["import { useState } from 'react'\nimport type { FormEvent, ReactNode } from 'react'\nimport { useNavigate, useSearch } from '@tanstack/react-router'\nimport { Button, Card, CardContent, Field, Heading, Input, Stack, Text } from '@elytracms/studio/ui'\nimport { useAuth } from '@elytracms/studio/components/auth-context'\nimport { LOCAL_DEV_CREDENTIALS, authMode, postSignInTarget } from '@elytracms/studio/lib/auth'\nimport type { SignInResult } from '@elytracms/studio/lib/auth'\nimport { signInErrorMessageKey } from '@elytracms/studio/lib/auth-errors'\nimport { useT } from '@elytracms/studio/lib/i18n'\nimport { getActiveProjectSlug, getWorkspaceState } from '@elytracms/studio/lib/workspace'\n\n/**\n * Engine-shipped `/sign-in` screen (EC-150; consolidated from the copy-pasted\n * consumer route by EC-375, EC-369 finding #8). The consumer route file keeps\n * only the route object — `createFileRoute('/sign-in')({ validateSearch,\n * component: SignInView })` — because TanStack Router requires the route object\n * to live in the consumer's route tree; the ~140-line body lives here so a\n * copy never drifts.\n *\n * Deterministic states: idle → submitting → (signed-in redirect | inline\n * structured failure). Invalid credentials are a rendered state, never a silent\n * failure or crash. In playground (in-memory) mode the seeded dev credentials\n * are listed so the whole flow works offline.\n *\n * Split into a `SignInView` container (owns the router + auth seams) and a\n * provider-free `SignInScreen` (pure local form state + injected callbacks) so\n * the screen static-renders in a node smoke test without the full provider tree.\n *\n * All copy resolves through the studio message catalog (`auth.signIn.*`,\n * EC-397), including the engine-classified auth failures — see\n * `signInErrorMessageKey`; an unrecognized failure renders `result.message`\n * raw (honest fallback).\n */\n\ntype FormPhase = 'idle' | 'submitting'\ntype AuthMode = 'signin' | 'signup'\n\n/** A seeded dev-credential entry surfaced in playground mode (fixtures, not secrets). */\ntype DevCredential = (typeof LOCAL_DEV_CREDENTIALS)[number]\n\nexport interface SignInViewProps {\n  /**\n   * Brand mark rendered above the heading. Defaults to the neutral studio\n   * placeholder square — a future logo just passes a node here (e.g.\n   * `component: () => <SignInView brandMark={<Logo />} />`), no engine change.\n   */\n  brandMark?: ReactNode\n  /** Product name in the \"Sign in to …\" heading. Default: `'Elytra'`. */\n  productName?: string\n}\n\n/**\n * The project whose backend this sign-in authenticates against (EC-179).\n * Exported for the session-expired re-auth overlay (EC-403), which mounts\n * {@link SignInScreen} with the same subtext.\n */\nexport function activeProjectName(): string | null {\n  const state = getWorkspaceState()\n  if (state.kind !== 'config') return null\n  const slug = getActiveProjectSlug()\n  const project = (slug && state.projects.find((p) => p.slug === slug)) || state.projects[0]\n  return project?.name ?? null\n}\n\n/**\n * The `/sign-in` route component. Container: reads the router (post-sign-in\n * redirect target from the route search) + auth seams and hands the pure\n * presentational screen its data plus an `authenticate` callback.\n */\nexport function SignInView({ brandMark, productName }: SignInViewProps) {\n  const auth = useAuth()\n  const navigate = useNavigate()\n  // Self-source the redirect (loose search — the consumer route's `validateSearch`\n  // guarantees `{ redirect?: string }`), so the route file needs no wrapper.\n  const search = useSearch({ strict: false }) as { redirect?: string }\n  const redirect = search.redirect\n\n  return (\n    <SignInScreen\n      projectName={activeProjectName()}\n      showModeToggle={authMode() === 'convex'}\n      devCredentials={authMode() === 'playground' ? LOCAL_DEV_CREDENTIALS : null}\n      brandMark={brandMark}\n      productName={productName}\n      authenticate={(mode, email, password) =>\n        mode === 'signup' ? auth.signUp(email, password) : auth.signIn(email, password)\n      }\n      onAuthenticated={() => navigate({ to: postSignInTarget(redirect) })}\n    />\n  )\n}\n\ninterface SignInScreenProps {\n  projectName: string | null\n  /** Whether to offer the sign-in ↔ create-account toggle (convex mode only). */\n  showModeToggle: boolean\n  /** Seeded dev accounts to list (playground mode), or null to hide the hint. */\n  devCredentials: readonly DevCredential[] | null\n  /**\n   * Contextual notice rendered above the heading — the session-expired\n   * re-auth overlay (EC-403) explains WHY the screen appeared here. The\n   * normal `/sign-in` route passes none.\n   */\n  notice?: ReactNode\n  brandMark?: ReactNode\n  productName?: string\n  /** Attempt auth for the chosen mode. The container maps this to signIn/signUp. */\n  authenticate: (mode: AuthMode, email: string, password: string) => Promise<SignInResult>\n  /** Called once, after a successful authentication (the container navigates). */\n  onAuthenticated: () => void | Promise<void>\n}\n\n/**\n * Provider-free presentational sign-in screen. Owns only local form state and\n * calls injected callbacks — no context hooks — so it static-renders in tests.\n */\nexport function SignInScreen({\n  projectName,\n  showModeToggle,\n  devCredentials,\n  notice,\n  brandMark,\n  productName = 'Elytra',\n  authenticate,\n  onAuthenticated,\n}: SignInScreenProps) {\n  const t = useT()\n  const [email, setEmail] = useState('')\n  const [password, setPassword] = useState('')\n  const [phase, setPhase] = useState<FormPhase>('idle')\n  const [mode, setMode] = useState<AuthMode>('signin')\n  const [error, setError] = useState<string | null>(null)\n\n  async function handleSubmit(event: FormEvent<HTMLFormElement>) {\n    event.preventDefault()\n    setPhase('submitting')\n    setError(null)\n    const result = await authenticate(mode, email, password)\n    if (result.ok) {\n      await onAuthenticated()\n      return\n    }\n    // A fresh backend has no account yet: nudge sign-in → create, and vice versa.\n    if (result.reason === 'account-exists') setMode('signin')\n    // EC-397: engine-classified failures (EC-362/EC-363 reasons) localize\n    // through the message catalog; an unrecognized shape renders the adapter's\n    // raw English message — honest, never a stale mapping.\n    const errorKey = signInErrorMessageKey(result)\n    setError(errorKey ? t(errorKey) : result.message)\n    setPhase('idle')\n  }\n\n  const submitting = phase === 'submitting'\n  const creating = mode === 'signup'\n\n  return (\n    <div className=\"grid min-h-dvh place-items-center bg-background p-6\">\n      <Stack gap=\"4\" className=\"w-full max-w-sm\">\n        {notice}\n        <Stack gap=\"1\" align=\"center\">\n          {brandMark ?? <span className=\"size-8 rounded-lg bg-primary shadow-sm\" aria-hidden />}\n          <Heading size=\"h2\">\n            {creating ? t('auth.signIn.headingCreate') : t('auth.signIn.heading', { productName })}\n          </Heading>\n          <Text size=\"sm\" tone=\"muted\">\n            {projectName\n              ? t(creating ? 'auth.signIn.subtext.register' : 'auth.signIn.subtext.continue', {\n                  project: projectName,\n                })\n              : t('auth.signIn.subtext.generic')}\n          </Text>\n        </Stack>\n\n        <Card>\n          <CardContent className=\"pt-5\">\n            <form onSubmit={handleSubmit} noValidate>\n              <Stack gap=\"4\">\n                <Field label={t('auth.signIn.emailLabel')} htmlFor=\"sign-in-email\" required>\n                  <Input\n                    id=\"sign-in-email\"\n                    type=\"email\"\n                    autoComplete=\"email\"\n                    value={email}\n                    onChange={(e) => setEmail(e.target.value)}\n                    placeholder={t('auth.signIn.emailPlaceholder')}\n                    disabled={submitting}\n                  />\n                </Field>\n                <Field\n                  label={t('auth.signIn.passwordLabel')}\n                  htmlFor=\"sign-in-password\"\n                  required\n                  error={error}\n                >\n                  <Input\n                    id=\"sign-in-password\"\n                    type=\"password\"\n                    autoComplete={creating ? 'new-password' : 'current-password'}\n                    value={password}\n                    onChange={(e) => setPassword(e.target.value)}\n                    disabled={submitting}\n                  />\n                </Field>\n                <Button type=\"submit\" disabled={submitting} className=\"w-full\">\n                  {submitting\n                    ? creating\n                      ? t('auth.signIn.submittingCreate')\n                      : t('auth.signIn.submitting')\n                    : creating\n                      ? t('auth.signIn.submitCreate')\n                      : t('auth.signIn.submit')}\n                </Button>\n              </Stack>\n            </form>\n          </CardContent>\n        </Card>\n\n        {showModeToggle ? (\n          <Text size=\"sm\" tone=\"muted\" className=\"text-center\">\n            {creating ? t('auth.signIn.toggle.alreadyHave') : t('auth.signIn.toggle.firstTime')}{' '}\n            <button\n              type=\"button\"\n              className=\"font-medium text-primary underline-offset-2 hover:underline\"\n              onClick={() => {\n                setMode(creating ? 'signin' : 'signup')\n                setError(null)\n              }}\n            >\n              {creating ? t('auth.signIn.toggle.signIn') : t('auth.signIn.toggle.createAccount')}\n            </button>\n          </Text>\n        ) : null}\n\n        {devCredentials ? <DevCredentialsHint entries={devCredentials} /> : null}\n      </Stack>\n    </div>\n  )\n}\n\n/** Seeded dev accounts for the explicit playground mode — fixtures, not secrets. */\nfunction DevCredentialsHint({ entries }: { entries: readonly DevCredential[] }) {\n  const t = useT()\n  return (\n    <Card className=\"border-dashed\">\n      <CardContent className=\"pt-4\">\n        <Stack gap=\"1\">\n          <Text size=\"xs\" tone=\"muted\" className=\"font-medium\">\n            {t('auth.signIn.devAccounts.title')}\n          </Text>\n          {entries.map((entry) => (\n            <Text key={entry.user.id} size=\"xs\" tone=\"muted\" className=\"font-mono\">\n              {entry.user.email} / {entry.password}\n            </Text>\n          ))}\n        </Stack>\n      </CardContent>\n    </Card>\n  )\n}\n"]}
+{"version":3,"file":"sign-in-view.js","sourceRoot":"","sources":["../../src/components/sign-in-view.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAEhC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AACpG,OAAO,EAAE,OAAO,EAAE,MAAM,2CAA2C,CAAA;AACnE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAE9F,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAA;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAA;AACjD,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAA;AA0CzF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAA;IACjC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACxC,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAA;IACnC,MAAM,OAAO,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IAC1F,OAAO,OAAO,EAAE,IAAI,IAAI,IAAI,CAAA;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,EAAE,SAAS,EAAE,WAAW,EAAmB;IACpE,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;IACtB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;IAC9B,iFAAiF;IACjF,2EAA2E;IAC3E,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAA0B,CAAA;IACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;IAEhC,OAAO,CACL,KAAC,YAAY,IACX,WAAW,EAAE,iBAAiB,EAAE,EAChC,cAAc,EAAE,QAAQ,EAAE,KAAK,QAAQ,EACvC,cAAc,EAAE,QAAQ,EAAE,KAAK,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,EAC1E,SAAS,EAAE,SAAS,EACpB,WAAW,EAAE,WAAW,EACxB,YAAY,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CACtC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,EAEjF,eAAe,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,GACnE,CACH,CAAA;AACH,CAAC;AA+BD;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,EAC3B,WAAW,EACX,cAAc,EACd,cAAc,EACd,MAAM,EACN,MAAM,GAAG,MAAM,EACf,SAAS,EACT,WAAW,GAAG,QAAQ,EACtB,YAAY,EACZ,eAAe,GACG;IAClB,MAAM,CAAC,GAAG,IAAI,EAAE,CAAA;IAChB,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IACtC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC5C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAY,MAAM,CAAC,CAAA;IACrD,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAW,QAAQ,CAAC,CAAA;IACpD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAA;IAEvD,KAAK,UAAU,YAAY,CAAC,KAAiC;QAC3D,KAAK,CAAC,cAAc,EAAE,CAAA;QACtB,QAAQ,CAAC,YAAY,CAAC,CAAA;QACtB,QAAQ,CAAC,IAAI,CAAC,CAAA;QACd,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;QACxD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,eAAe,EAAE,CAAA;YACvB,OAAM;QACR,CAAC;QACD,8EAA8E;QAC9E,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB;YAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;QACzD,sEAAsE;QACtE,2EAA2E;QAC3E,uDAAuD;QACvD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAA;QAC9C,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACjD,QAAQ,CAAC,MAAM,CAAC,CAAA;IAClB,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,KAAK,YAAY,CAAA;IACzC,MAAM,QAAQ,GAAG,IAAI,KAAK,QAAQ,CAAA;IAElC,OAAO,CACL,KAAC,WAAW,IAAC,MAAM,EAAE,MAAM,YACzB,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,EAAC,SAAS,EAAC,iBAAiB,aACvC,MAAM,EACP,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,EAAC,KAAK,EAAC,QAAQ,aAC1B,SAAS,IAAI,eAAM,SAAS,EAAC,wCAAwC,wBAAe,EACrF,KAAC,OAAO,IAAC,IAAI,EAAC,IAAI,YACf,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,EAAE,EAAE,WAAW,EAAE,CAAC,GAC9E,EACV,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,YACzB,WAAW;gCACV,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,8BAA8B,EAAE;oCAC5E,OAAO,EAAE,WAAW;iCACrB,CAAC;gCACJ,CAAC,CAAC,CAAC,CAAC,6BAA6B,CAAC,GAC/B,IACD,EAER,KAAC,IAAI,cACH,KAAC,WAAW,IAAC,SAAS,EAAC,MAAM,YAC3B,eAAM,QAAQ,EAAE,YAAY,EAAE,UAAU,kBACtC,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,aACZ,KAAC,KAAK,IAAC,KAAK,EAAE,CAAC,CAAC,wBAAwB,CAAC,EAAE,OAAO,EAAC,eAAe,EAAC,QAAQ,kBACzE,KAAC,KAAK,IACJ,EAAE,EAAC,eAAe,EAClB,IAAI,EAAC,OAAO,EACZ,YAAY,EAAC,OAAO,EACpB,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACzC,WAAW,EAAE,CAAC,CAAC,8BAA8B,CAAC,EAC9C,QAAQ,EAAE,UAAU,GACpB,GACI,EACR,KAAC,KAAK,IACJ,KAAK,EAAE,CAAC,CAAC,2BAA2B,CAAC,EACrC,OAAO,EAAC,kBAAkB,EAC1B,QAAQ,QACR,KAAK,EAAE,KAAK,YAEZ,KAAC,KAAK,IACJ,EAAE,EAAC,kBAAkB,EACrB,IAAI,EAAC,UAAU,EACf,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,kBAAkB,EAC5D,KAAK,EAAE,QAAQ,EACf,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAC5C,QAAQ,EAAE,UAAU,GACpB,GACI,EACR,KAAC,MAAM,IAAC,IAAI,EAAC,QAAQ,EAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAC,QAAQ,YAC3D,UAAU;4CACT,CAAC,CAAC,QAAQ;gDACR,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC;gDACnC,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC;4CAC/B,CAAC,CAAC,QAAQ;gDACR,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC;gDAC/B,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,GACtB,IACH,GACH,GACK,GACT,EAEN,cAAc,CAAC,CAAC,CAAC,CAChB,MAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,aAAa,aACjD,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC,EAAE,GAAG,EACxF,iBACE,IAAI,EAAC,QAAQ,EACb,SAAS,EAAC,6DAA6D,EACvE,OAAO,EAAE,GAAG,EAAE;gCACZ,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;gCACvC,QAAQ,CAAC,IAAI,CAAC,CAAA;4BAChB,CAAC,YAEA,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kCAAkC,CAAC,GAC3E,IACJ,CACR,CAAC,CAAC,CAAC,IAAI,EAEP,cAAc,CAAC,CAAC,CAAC,KAAC,kBAAkB,IAAC,OAAO,EAAE,cAAc,GAAI,CAAC,CAAC,CAAC,IAAI,IAClE,GACI,CACf,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAoD;IACzF,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,4BAAG,QAAQ,GAAI,CAAA;IAC7C,OAAO,cAAK,SAAS,EAAC,qDAAqD,YAAE,QAAQ,GAAO,CAAA;AAC9F,CAAC;AAED,oFAAoF;AACpF,SAAS,kBAAkB,CAAC,EAAE,OAAO,EAAyC;IAC5E,MAAM,CAAC,GAAG,IAAI,EAAE,CAAA;IAChB,OAAO,CACL,KAAC,IAAI,IAAC,SAAS,EAAC,eAAe,YAC7B,KAAC,WAAW,IAAC,SAAS,EAAC,MAAM,YAC3B,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,aACZ,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,aAAa,YACjD,CAAC,CAAC,+BAA+B,CAAC,GAC9B,EACN,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CACtB,MAAC,IAAI,IAAqB,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,WAAW,aACnE,KAAK,CAAC,IAAI,CAAC,KAAK,SAAK,KAAK,CAAC,QAAQ,KAD3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAEjB,CACR,CAAC,IACI,GACI,GACT,CACR,CAAA;AACH,CAAC","sourcesContent":["import { useState } from 'react'\nimport type { FormEvent, ReactNode } from 'react'\nimport { useNavigate, useSearch } from '@tanstack/react-router'\nimport { Button, Card, CardContent, Field, Heading, Input, Stack, Text } from '@elytracms/studio/ui'\nimport { useAuth } from '@elytracms/studio/components/auth-context'\nimport { LOCAL_DEV_CREDENTIALS, authMode, postSignInTarget } from '@elytracms/studio/lib/auth'\nimport type { SignInResult } from '@elytracms/studio/lib/auth'\nimport { signInErrorMessageKey } from '@elytracms/studio/lib/auth-errors'\nimport { useT } from '@elytracms/studio/lib/i18n'\nimport { getActiveProjectSlug, getWorkspaceState } from '@elytracms/studio/lib/workspace'\n\n/**\n * Engine-shipped `/sign-in` screen (EC-150; consolidated from the copy-pasted\n * consumer route by EC-375, EC-369 finding #8). The consumer route file keeps\n * only the route object — `createFileRoute('/sign-in')({ validateSearch,\n * component: SignInView })` — because TanStack Router requires the route object\n * to live in the consumer's route tree; the ~140-line body lives here so a\n * copy never drifts.\n *\n * Deterministic states: idle → submitting → (signed-in redirect | inline\n * structured failure). Invalid credentials are a rendered state, never a silent\n * failure or crash. In playground (in-memory) mode the seeded dev credentials\n * are listed so the whole flow works offline.\n *\n * Split into a `SignInView` container (owns the router + auth seams) and a\n * provider-free `SignInScreen` (pure local form state + injected callbacks) so\n * the screen static-renders in a node smoke test without the full provider tree.\n *\n * All copy resolves through the studio message catalog (`auth.signIn.*`,\n * EC-397), including the engine-classified auth failures — see\n * `signInErrorMessageKey`; an unrecognized failure renders `result.message`\n * raw (honest fallback).\n */\n\ntype FormPhase = 'idle' | 'submitting'\ntype AuthMode = 'signin' | 'signup'\n\n/** A seeded dev-credential entry surfaced in playground mode (fixtures, not secrets). */\ntype DevCredential = (typeof LOCAL_DEV_CREDENTIALS)[number]\n\nexport interface SignInViewProps {\n  /**\n   * Brand mark rendered above the heading. Defaults to the neutral studio\n   * placeholder square — a future logo just passes a node here (e.g.\n   * `component: () => <SignInView brandMark={<Logo />} />`), no engine change.\n   */\n  brandMark?: ReactNode\n  /** Product name in the \"Sign in to …\" heading. Default: `'Elytra'`. */\n  productName?: string\n}\n\n/**\n * The project whose backend this sign-in authenticates against (EC-179).\n * Exported for the session-expired re-auth overlay (EC-403), which mounts\n * {@link SignInScreen} with the same subtext.\n */\nexport function activeProjectName(): string | null {\n  const state = getWorkspaceState()\n  if (state.kind !== 'config') return null\n  const slug = getActiveProjectSlug()\n  const project = (slug && state.projects.find((p) => p.slug === slug)) || state.projects[0]\n  return project?.name ?? null\n}\n\n/**\n * The `/sign-in` route component. Container: reads the router (post-sign-in\n * redirect target from the route search) + auth seams and hands the pure\n * presentational screen its data plus an `authenticate` callback.\n */\nexport function SignInView({ brandMark, productName }: SignInViewProps) {\n  const auth = useAuth()\n  const navigate = useNavigate()\n  // Self-source the redirect (loose search — the consumer route's `validateSearch`\n  // guarantees `{ redirect?: string }`), so the route file needs no wrapper.\n  const search = useSearch({ strict: false }) as { redirect?: string }\n  const redirect = search.redirect\n\n  return (\n    <SignInScreen\n      projectName={activeProjectName()}\n      showModeToggle={authMode() === 'convex'}\n      devCredentials={authMode() === 'playground' ? LOCAL_DEV_CREDENTIALS : null}\n      brandMark={brandMark}\n      productName={productName}\n      authenticate={(mode, email, password) =>\n        mode === 'signup' ? auth.signUp(email, password) : auth.signIn(email, password)\n      }\n      onAuthenticated={() => navigate({ to: postSignInTarget(redirect) })}\n    />\n  )\n}\n\ninterface SignInScreenProps {\n  projectName: string | null\n  /** Whether to offer the sign-in ↔ create-account toggle (convex mode only). */\n  showModeToggle: boolean\n  /** Seeded dev accounts to list (playground mode), or null to hide the hint. */\n  devCredentials: readonly DevCredential[] | null\n  /**\n   * Contextual notice rendered above the heading — the session-expired\n   * re-auth overlay (EC-403) explains WHY the screen appeared here. The\n   * normal `/sign-in` route passes none.\n   */\n  notice?: ReactNode\n  /**\n   * Presentation wrapper (EC-437). `'page'` (default) renders the\n   * full-viewport opaque panel — the `/sign-in` route's shipped layout,\n   * byte-identical. `'bare'` renders only the centered card column so a host\n   * surface composes its own backdrop: the session-expired re-auth overlay\n   * mounts it over a translucent blurred backdrop, keeping the intact studio\n   * visible beneath the prompt.\n   */\n  layout?: 'page' | 'bare'\n  brandMark?: ReactNode\n  productName?: string\n  /** Attempt auth for the chosen mode. The container maps this to signIn/signUp. */\n  authenticate: (mode: AuthMode, email: string, password: string) => Promise<SignInResult>\n  /** Called once, after a successful authentication (the container navigates). */\n  onAuthenticated: () => void | Promise<void>\n}\n\n/**\n * Provider-free presentational sign-in screen. Owns only local form state and\n * calls injected callbacks — no context hooks — so it static-renders in tests.\n */\nexport function SignInScreen({\n  projectName,\n  showModeToggle,\n  devCredentials,\n  notice,\n  layout = 'page',\n  brandMark,\n  productName = 'Elytra',\n  authenticate,\n  onAuthenticated,\n}: SignInScreenProps) {\n  const t = useT()\n  const [email, setEmail] = useState('')\n  const [password, setPassword] = useState('')\n  const [phase, setPhase] = useState<FormPhase>('idle')\n  const [mode, setMode] = useState<AuthMode>('signin')\n  const [error, setError] = useState<string | null>(null)\n\n  async function handleSubmit(event: FormEvent<HTMLFormElement>) {\n    event.preventDefault()\n    setPhase('submitting')\n    setError(null)\n    const result = await authenticate(mode, email, password)\n    if (result.ok) {\n      await onAuthenticated()\n      return\n    }\n    // A fresh backend has no account yet: nudge sign-in → create, and vice versa.\n    if (result.reason === 'account-exists') setMode('signin')\n    // EC-397: engine-classified failures (EC-362/EC-363 reasons) localize\n    // through the message catalog; an unrecognized shape renders the adapter's\n    // raw English message — honest, never a stale mapping.\n    const errorKey = signInErrorMessageKey(result)\n    setError(errorKey ? t(errorKey) : result.message)\n    setPhase('idle')\n  }\n\n  const submitting = phase === 'submitting'\n  const creating = mode === 'signup'\n\n  return (\n    <ScreenShell layout={layout}>\n      <Stack gap=\"4\" className=\"w-full max-w-sm\">\n        {notice}\n        <Stack gap=\"1\" align=\"center\">\n          {brandMark ?? <span className=\"size-8 rounded-lg bg-primary shadow-sm\" aria-hidden />}\n          <Heading size=\"h2\">\n            {creating ? t('auth.signIn.headingCreate') : t('auth.signIn.heading', { productName })}\n          </Heading>\n          <Text size=\"sm\" tone=\"muted\">\n            {projectName\n              ? t(creating ? 'auth.signIn.subtext.register' : 'auth.signIn.subtext.continue', {\n                  project: projectName,\n                })\n              : t('auth.signIn.subtext.generic')}\n          </Text>\n        </Stack>\n\n        <Card>\n          <CardContent className=\"pt-5\">\n            <form onSubmit={handleSubmit} noValidate>\n              <Stack gap=\"4\">\n                <Field label={t('auth.signIn.emailLabel')} htmlFor=\"sign-in-email\" required>\n                  <Input\n                    id=\"sign-in-email\"\n                    type=\"email\"\n                    autoComplete=\"email\"\n                    value={email}\n                    onChange={(e) => setEmail(e.target.value)}\n                    placeholder={t('auth.signIn.emailPlaceholder')}\n                    disabled={submitting}\n                  />\n                </Field>\n                <Field\n                  label={t('auth.signIn.passwordLabel')}\n                  htmlFor=\"sign-in-password\"\n                  required\n                  error={error}\n                >\n                  <Input\n                    id=\"sign-in-password\"\n                    type=\"password\"\n                    autoComplete={creating ? 'new-password' : 'current-password'}\n                    value={password}\n                    onChange={(e) => setPassword(e.target.value)}\n                    disabled={submitting}\n                  />\n                </Field>\n                <Button type=\"submit\" disabled={submitting} className=\"w-full\">\n                  {submitting\n                    ? creating\n                      ? t('auth.signIn.submittingCreate')\n                      : t('auth.signIn.submitting')\n                    : creating\n                      ? t('auth.signIn.submitCreate')\n                      : t('auth.signIn.submit')}\n                </Button>\n              </Stack>\n            </form>\n          </CardContent>\n        </Card>\n\n        {showModeToggle ? (\n          <Text size=\"sm\" tone=\"muted\" className=\"text-center\">\n            {creating ? t('auth.signIn.toggle.alreadyHave') : t('auth.signIn.toggle.firstTime')}{' '}\n            <button\n              type=\"button\"\n              className=\"font-medium text-primary underline-offset-2 hover:underline\"\n              onClick={() => {\n                setMode(creating ? 'signin' : 'signup')\n                setError(null)\n              }}\n            >\n              {creating ? t('auth.signIn.toggle.signIn') : t('auth.signIn.toggle.createAccount')}\n            </button>\n          </Text>\n        ) : null}\n\n        {devCredentials ? <DevCredentialsHint entries={devCredentials} /> : null}\n      </Stack>\n    </ScreenShell>\n  )\n}\n\n/**\n * The screen's presentation shell (EC-437). `'page'` is the `/sign-in`\n * route's shipped full-viewport opaque panel, byte-identical; `'bare'`\n * renders the card column alone — the session-expired re-auth overlay owns\n * backdrop + centering there, so the studio stays visible beneath the prompt.\n */\nfunction ScreenShell({ layout, children }: { layout: 'page' | 'bare'; children: ReactNode }) {\n  if (layout === 'bare') return <>{children}</>\n  return <div className=\"grid min-h-dvh place-items-center bg-background p-6\">{children}</div>\n}\n\n/** Seeded dev accounts for the explicit playground mode — fixtures, not secrets. */\nfunction DevCredentialsHint({ entries }: { entries: readonly DevCredential[] }) {\n  const t = useT()\n  return (\n    <Card className=\"border-dashed\">\n      <CardContent className=\"pt-4\">\n        <Stack gap=\"1\">\n          <Text size=\"xs\" tone=\"muted\" className=\"font-medium\">\n            {t('auth.signIn.devAccounts.title')}\n          </Text>\n          {entries.map((entry) => (\n            <Text key={entry.user.id} size=\"xs\" tone=\"muted\" className=\"font-mono\">\n              {entry.user.email} / {entry.password}\n            </Text>\n          ))}\n        </Stack>\n      </CardContent>\n    </Card>\n  )\n}\n"]}

package/dist/components/users/users-collection-view-source.js

@@ -21,7 +21,7 @@ export const USER_COLLECTION_CAPABILITIES = {
     inlineEdit: false,
     create: false, // identities are minted by sign-up, never here
     remove: true, // revoke membership (does not delete the auth identity)
-    bulk: false,
+    bulk: true, // EC-433: bulk delete = the same per-id revoke, honestly reported
     liveUrl: false,
     hierarchy: false,
     importExport: false, // credential records are never dumped to raw JSON