@elytracms/studio 0.0.75 → 0.0.76

package/dist/components/project-list.js

@@ -1,5 +1,5 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
-import { isExplicitLauncherVisit, Link, Navigate, STUDIO_PROJECT_ROUTE, studioPath, useLocation, } from '@elytracms/studio/router';
+import { isExplicitLauncherVisit, Link, NavigateOnce, STUDIO_PROJECT_ROUTE, studioPath, useLocation, } from '@elytracms/studio/router';
 import { Globe, LogIn, TerminalSquare } from 'lucide-react';
 import { Badge, Button, Card, Code, Heading, Row, Spacer, Stack, Text } from '@elytracms/studio/ui';
 import { hasProjectSession } from '@elytracms/studio/lib/auth';
@@ -39,7 +39,11 @@ export function ProjectLauncher({ forcedState }) {
         explicitVisit: isExplicitLauncherVisit(location.state),
     });
     if (autoForward) {
-        return (_jsx(Navigate, { to: STUDIO_PROJECT_ROUTE, params: { projectId: autoForward.id, _splat: studioPath.index() }, replace: true }));
+        // EC-441: `NavigateOnce`, not `<Navigate>` — on a slow boot the launcher
+        // stays mounted while the project splat's modules load, re-rendering on
+        // every router-store tick; a per-render re-navigate compounded into the
+        // "Maximum update depth exceeded" rejection (104 re-fires on one cold load).
+        return (_jsx(NavigateOnce, { to: STUDIO_PROJECT_ROUTE, params: { projectId: autoForward.id, _splat: studioPath.index() }, replace: true }));
     }
     return (_jsxs("div", { className: "mx-auto w-full max-w-6xl px-6 py-8", children: [_jsxs(Row, { gap: "3", className: "mb-6", children: [_jsxs(Stack, { gap: "1", children: [_jsxs(Row, { gap: "2", children: [_jsx(Heading, { size: "display", children: translate('shell.projects') }), _jsx(PlaygroundBadge, {}), hasConfig ? (_jsxs(Badge, { variant: "outline", children: [_jsx(TerminalSquare, { className: "size-3" }), " ", workspace.source] })) : null] }), _jsx(Text, { tone: "muted", children: hasConfig
                                     ? 'Projects are defined in code. Add entries to elytra.config.ts and provision them with the CLI.'

package/dist/components/project-list.js.map

@@ -1 +1 @@
-{"version":3,"file":"project-list.js","sourceRoot":"","sources":["../../src/components/project-list.tsx"],"names":[],"mappings":";AAAA,OAAO,EACL,uBAAuB,EACvB,IAAI,EACJ,QAAQ,EACR,oBAAoB,EACpB,UAAU,EACV,WAAW,GACZ,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAE3D,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AACnG,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AAC9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAA;AAC3E,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5C,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAO5E;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,EAAE,WAAW,EAAwB;IACnE,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;IAC1B,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,kBAAkB,EAAE,CAAA;IAEnD,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAA;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAA;IACvB,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC1C,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;IAE9B,MAAM,MAAM,GAAG,WAAW,IAAI,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAA;IAE5E,2EAA2E;IAC3E,4EAA4E;IAC5E,uEAAuE;IACvE,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,WAAW,GAAG,yBAAyB,CAAC;QAC5C,OAAO;QACP,WAAW,EAAE,WAAW,IAAI,IAAI;QAChC,aAAa,EAAE,uBAAuB,CAAC,QAAQ,CAAC,KAAK,CAAC;KACvD,CAAC,CAAA;IACF,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CACL,KAAC,QAAQ,IACP,EAAE,EAAE,oBAAoB,EACxB,MAAM,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,KAAK,EAAE,EAAE,EACjE,OAAO,SACP,CACH,CAAA;IACH,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,oCAAoC,aACjD,MAAC,GAAG,IAAC,GAAG,EAAC,GAAG,EAAC,SAAS,EAAC,MAAM,aAC3B,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,aACZ,MAAC,GAAG,IAAC,GAAG,EAAC,GAAG,aACV,KAAC,OAAO,IAAC,IAAI,EAAC,SAAS,YAAE,SAAS,CAAC,gBAAgB,CAAC,GAAW,EAE/D,KAAC,eAAe,KAAG,EAClB,SAAS,CAAC,CAAC,CAAC,CAEX,MAAC,KAAK,IAAC,OAAO,EAAC,SAAS,aACtB,KAAC,cAAc,IAAC,SAAS,EAAC,QAAQ,GAAG,OAAE,SAAS,CAAC,MAAM,IACjD,CACT,CAAC,CAAC,CAAC,IAAI,IACJ,EACN,KAAC,IAAI,IAAC,IAAI,EAAC,OAAO,YACf,SAAS;oCACR,CAAC,CAAC,gGAAgG;oCAClG,CAAC,CAAC,uCAAuC,GACtC,IACD,EACR,KAAC,MAAM,KAAG,IACN,EAEL,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAC/B,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,EAAC,SAAS,EAAC,MAAM,aAC7B,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAC,IAAI,QAAC,SAAS,EAAC,WAAW,YACpD,SAAS,CAAC,0BAA0B,CAAC,GACjC,EACP,KAAC,GAAG,IAAC,GAAG,EAAC,GAAG,EAAC,IAAI,kBACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAClB,MAAC,IAAI,IAEH,EAAE,EAAE,oBAAoB,EACxB,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,KAAK,EAAE,EAAE,EACvD,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EACpC,SAAS,EAAC,qJAAqJ,aAE/J,eAAM,SAAS,EAAC,yGAAyG,YACtH,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAC1B,EACN,CAAC,CAAC,IAAI,KATF,CAAC,CAAC,EAAE,CAUJ,CACR,CAAC,GACE,IACA,CACT,CAAC,CAAC,CAAC,IAAI,EAEP,MAAM,CAAC,CAAC,CAAC,CACR,KAAC,gBAAgB,IACf,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC,SAAS,GAClF,CACH,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CACzB,KAAC,gBAAgB,IACf,KAAK,EAAC,OAAO,EACb,KAAK,EAAE,SAAS,CAAC,+BAA+B,CAAC,EACjD,WAAW,EACT,SAAS;oBACP,CAAC,CAAC,2HAA2H;oBAC7H,CAAC,CAAC,kJAAkJ,GAExJ,CACH,CAAC,CAAC,CAAC,CACF,cAAK,SAAS,EAAC,0CAA0C,YACtD,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACrB,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CACzB,KAAC,WAAW,IAAwB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAxC,KAAK,CAAC,OAAO,CAAC,EAAE,CAA4B,CAC/D,CAAC,CAAC,CAAC,CACF,KAAC,iBAAiB,IAAqC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAnD,UAAU,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAA0B,CAChF,CACF,GACG,CACP,IACG,CACP,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,EAAE,OAAO,EAAwB;IACpD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;IAC1B,+EAA+E;IAC/E,+EAA+E;IAC/E,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,OAAO,CACL,MAAC,IAAI,IAAC,SAAS,EAAC,mEAAmE,aACjF,MAAC,GAAG,IAAC,GAAG,EAAC,GAAG,aACV,eAAM,SAAS,EAAC,yGAAyG,YACtH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAChC,EACP,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,EAAC,SAAS,EAAC,SAAS,aAChC,KAAC,IAAI,IAAC,MAAM,EAAC,UAAU,EAAC,SAAS,EAAC,UAAU,YACzC,OAAO,CAAC,IAAI,GACR,EACP,KAAC,IAAI,IAAC,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,2BAA2B,YACrD,OAAO,CAAC,IAAI,GACR,IACD,EACR,KAAC,MAAM,KAAG,EACT,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAC,iBAAiB,KAAG,IAClC,EAEN,MAAC,GAAG,IAAC,GAAG,EAAC,GAAG,EAAC,SAAS,EAAC,uBAAuB,aAC5C,MAAC,KAAK,IAAC,OAAO,EAAC,SAAS,aACtB,KAAC,KAAK,IAAC,SAAS,EAAC,QAAQ,GAAG,OAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,IACvD,EACR,KAAC,MAAM,KAAG,IACN,EAEN,KAAC,MAAM,IAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,EAAC,IAAI,EAAC,OAAO,QAAC,SAAS,EAAC,MAAM,YACnF,KAAC,IAAI,IACH,EAAE,EAAE,oBAAoB,EACxB,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,KAAK,EAAE,EAAE,EAC7D,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,YAEzC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAC9C,8BACE,KAAC,KAAK,KAAG,OAAE,SAAS,CAAC,aAAa,CAAC,IAClC,CACJ,GACI,GACA,IACJ,CACR,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,EAAE,MAAM,EAAwC;IACzE,OAAO,CACL,MAAC,IAAI,IAAC,SAAS,EAAC,uCAAuC,aACrD,MAAC,GAAG,IAAC,GAAG,EAAC,GAAG,aACV,eAAM,SAAS,EAAC,0HAA0H,YACvI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAC/B,EACP,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,EAAC,SAAS,EAAC,SAAS,aAChC,KAAC,IAAI,IAAC,MAAM,EAAC,UAAU,EAAC,SAAS,EAAC,UAAU,YACzC,MAAM,CAAC,IAAI,GACP,EACP,KAAC,IAAI,IAAC,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,2BAA2B,YACrD,MAAM,CAAC,IAAI,GACP,IACD,EACR,KAAC,MAAM,KAAG,EACV,KAAC,KAAK,IAAC,OAAO,EAAC,SAAS,YAAE,SAAS,CAAC,8BAA8B,CAAC,GAAS,IACxE,EAEN,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,kHAGrB,EACP,MAAC,IAAI,IAAC,SAAS,EAAC,yCAAyC,wCAC/B,MAAM,CAAC,IAAI,IAC9B,IACF,CACR,CAAA;AACH,CAAC","sourcesContent":["import {\n  isExplicitLauncherVisit,\n  Link,\n  Navigate,\n  STUDIO_PROJECT_ROUTE,\n  studioPath,\n  useLocation,\n} from '@elytracms/studio/router'\nimport { Globe, LogIn, TerminalSquare } from 'lucide-react'\nimport type { Project, ResolvedWorkspaceProject, SectionState } from '@elytracms/core/studio-core'\nimport { Badge, Button, Card, Code, Heading, Row, Spacer, Stack, Text } from '@elytracms/studio/ui'\nimport { hasProjectSession } from '@elytracms/studio/lib/auth'\nimport { launcherAutoForwardTarget } from '@elytracms/studio/lib/workspace'\nimport { translate } from '@elytracms/studio/lib/i18n'\nimport { PlaygroundBadge } from './playground-badge'\nimport { SignInNeededBadge } from './sign-in-needed-badge'\nimport { SectionStateView } from './section-state'\nimport { useStudio } from './studio-context'\nimport { useRecentProjects, useSwitcherEntries } from './workspace-projects'\n\nexport interface ProjectLauncherProps {\n  /** Force a deterministic list state for browser verification (?state=…). */\n  forcedState?: SectionState | null\n}\n\n/**\n * Studio launcher / project list (brief §4.3, §8.1; reframed by EC-154). The\n * Studio's front door: lists the workspace's projects and routes into a\n * project's shell. With a workspace config the list is config-driven\n * (configured projects ∩ grants, plus explicit \"not provisioned\" states);\n * project *creation* is code-first — `elytra.config.ts` + `builder init\n * --project <slug>` — so there is no in-UI create flow. Without a config the\n * adapter-backed list (and the starter-kit gallery) behaves as before.\n */\nexport function ProjectLauncher({ forcedState }: ProjectLauncherProps) {\n  const studio = useStudio()\n  const { entries, workspace } = useSwitcherEntries()\n\n  const hasConfig = workspace.kind === 'config'\n  const visible = entries\n  const recents = useRecentProjects(entries)\n  const location = useLocation()\n\n  const forced = forcedState && forcedState !== 'working' ? forcedState : null\n\n  // EC-401: a single-project workspace skips the launcher hop — the bare `/`\n  // hit forwards straight into the sole project (replace, so Back never loops\n  // through the launcher). Explicit \"all projects\" navigations carry the\n  // history-state marker and keep the launcher visible, as do forced `?state=`\n  // verification states and a lone UNPROVISIONED entry (its setup gate lives\n  // here). Activation/recents are recorded by the project screen on arrival.\n  const autoForward = launcherAutoForwardTarget({\n    entries,\n    forcedState: forcedState != null,\n    explicitVisit: isExplicitLauncherVisit(location.state),\n  })\n  if (autoForward) {\n    return (\n      <Navigate\n        to={STUDIO_PROJECT_ROUTE}\n        params={{ projectId: autoForward.id, _splat: studioPath.index() }}\n        replace\n      />\n    )\n  }\n\n  return (\n    <div className=\"mx-auto w-full max-w-6xl px-6 py-8\">\n      <Row gap=\"3\" className=\"mb-6\">\n        <Stack gap=\"1\">\n          <Row gap=\"2\">\n            <Heading size=\"display\">{translate('shell.projects')}</Heading>\n            {/* EC-153: explicit playground-mode marker (renders nothing on Convex). */}\n            <PlaygroundBadge />\n            {hasConfig ? (\n              // EC-154: this workspace is defined in code.\n              <Badge variant=\"outline\">\n                <TerminalSquare className=\"size-3\" /> {workspace.source}\n              </Badge>\n            ) : null}\n          </Row>\n          <Text tone=\"muted\">\n            {hasConfig\n              ? 'Projects are defined in code. Add entries to elytra.config.ts and provision them with the CLI.'\n              : 'Open and manage your Elytra projects.'}\n          </Text>\n        </Stack>\n        <Spacer />\n      </Row>\n\n      {recents.length > 0 && !forced ? (\n        <Stack gap=\"2\" className=\"mb-6\">\n          <Text size=\"xs\" tone=\"muted\" mono className=\"uppercase\">\n            {translate('shell.projectList.recent')}\n          </Text>\n          <Row gap=\"2\" wrap>\n            {recents.map((p) => (\n              <Link\n                key={p.id}\n                to={STUDIO_PROJECT_ROUTE}\n                params={{ projectId: p.id, _splat: studioPath.index() }}\n                onClick={() => studio.activate(p.id)}\n                className=\"inline-flex items-center gap-2 rounded-md border border-border bg-card px-3 py-1.5 text-sm transition-colors hover:border-primary/40 hover:bg-muted\"\n              >\n                <span className=\"grid size-4 place-items-center rounded-[4px] bg-primary text-[0.6rem] font-bold text-primary-foreground\">\n                  {p.name.charAt(0).toUpperCase()}\n                </span>\n                {p.name}\n              </Link>\n            ))}\n          </Row>\n        </Stack>\n      ) : null}\n\n      {forced ? (\n        <SectionStateView\n          state={forced}\n          title={forced === 'empty' ? translate('shell.projectList.empty.title') : undefined}\n        />\n      ) : visible.length === 0 ? (\n        <SectionStateView\n          state=\"empty\"\n          title={translate('shell.projectList.empty.title')}\n          description={\n            hasConfig\n              ? 'The workspace config declares no visible projects. Add an entry to elytra.config.ts, or ask an admin to grant you access.'\n              : 'No active projects. Create one from the CLI: run `builder init` in your repo to scaffold elytra.config.ts, then `builder init --project <slug>`.'\n          }\n        />\n      ) : (\n        <div className=\"grid gap-4 sm:grid-cols-2 lg:grid-cols-3\">\n          {visible.map((entry) =>\n            entry.kind === 'project' ? (\n              <ProjectCard key={entry.project.id} project={entry.project} />\n            ) : (\n              <UnprovisionedCard key={`config:${entry.config.slug}`} config={entry.config} />\n            ),\n          )}\n        </div>\n      )}\n    </div>\n  )\n}\n\nfunction ProjectCard({ project }: { project: Project }) {\n  const studio = useStudio()\n  // Per-backend sign-in state (EC-179): one project per backend, so a project on\n  // a deployment the user hasn't authenticated into shows \"Sign in\", not \"Open\".\n  const authed = hasProjectSession(project.slug)\n  return (\n    <Card className=\"flex flex-col gap-3 p-4 transition-colors hover:border-primary/30\">\n      <Row gap=\"2\">\n        <span className=\"grid size-8 shrink-0 place-items-center rounded-lg bg-primary text-sm font-bold text-primary-foreground\">\n          {project.name.charAt(0).toUpperCase()}\n        </span>\n        <Stack gap=\"1\" className=\"min-w-0\">\n          <Text weight=\"semibold\" className=\"truncate\">\n            {project.name}\n          </Text>\n          <Code tone=\"muted\" className=\"w-fit max-w-full truncate\">\n            {project.slug}\n          </Code>\n        </Stack>\n        <Spacer />\n        {authed ? null : <SignInNeededBadge />}\n      </Row>\n\n      <Row gap=\"2\" className=\"text-muted-foreground\">\n        <Badge variant=\"outline\">\n          <Globe className=\"size-3\" /> {project.settings.locales.length}\n        </Badge>\n        <Spacer />\n      </Row>\n\n      <Button variant={authed ? 'secondary' : 'default'} size=\"sm\" asChild className=\"mt-1\">\n        <Link\n          to={STUDIO_PROJECT_ROUTE}\n          params={{ projectId: project.id, _splat: studioPath.index() }}\n          onClick={() => studio.activate(project.id)}\n        >\n          {authed ? translate('shell.projectCard.open') : (\n            <>\n              <LogIn /> {translate('auth.signIn')}\n            </>\n          )}\n        </Link>\n      </Button>\n    </Card>\n  )\n}\n\n/**\n * A configured project that has no backend project yet (EC-154): an explicit,\n * deterministic state pointing at the CLI provisioning flow — never an error.\n */\nfunction UnprovisionedCard({ config }: { config: ResolvedWorkspaceProject }) {\n  return (\n    <Card className=\"flex flex-col gap-3 border-dashed p-4\">\n      <Row gap=\"2\">\n        <span className=\"grid size-8 shrink-0 place-items-center rounded-lg border border-border bg-muted text-sm font-bold text-muted-foreground\">\n          {config.name.charAt(0).toUpperCase()}\n        </span>\n        <Stack gap=\"1\" className=\"min-w-0\">\n          <Text weight=\"semibold\" className=\"truncate\">\n            {config.name}\n          </Text>\n          <Code tone=\"muted\" className=\"w-fit max-w-full truncate\">\n            {config.slug}\n          </Code>\n        </Stack>\n        <Spacer />\n        <Badge variant=\"outline\">{translate('shell.project.notProvisioned')}</Badge>\n      </Row>\n\n      <Text size=\"sm\" tone=\"muted\">\n        Declared in the workspace config, but no backend project exists yet. Provision it from your\n        repo:\n      </Text>\n      <Code className=\"block w-fit max-w-full truncate text-xs\">\n        builder init --project {config.slug}\n      </Code>\n    </Card>\n  )\n}\n"]}
+{"version":3,"file":"project-list.js","sourceRoot":"","sources":["../../src/components/project-list.tsx"],"names":[],"mappings":";AAAA,OAAO,EACL,uBAAuB,EACvB,IAAI,EACJ,YAAY,EACZ,oBAAoB,EACpB,UAAU,EACV,WAAW,GACZ,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAE3D,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AACnG,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AAC9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAA;AAC3E,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5C,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAO5E;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,EAAE,WAAW,EAAwB;IACnE,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;IAC1B,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,kBAAkB,EAAE,CAAA;IAEnD,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAA;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAA;IACvB,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC1C,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;IAE9B,MAAM,MAAM,GAAG,WAAW,IAAI,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAA;IAE5E,2EAA2E;IAC3E,4EAA4E;IAC5E,uEAAuE;IACvE,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,WAAW,GAAG,yBAAyB,CAAC;QAC5C,OAAO;QACP,WAAW,EAAE,WAAW,IAAI,IAAI;QAChC,aAAa,EAAE,uBAAuB,CAAC,QAAQ,CAAC,KAAK,CAAC;KACvD,CAAC,CAAA;IACF,IAAI,WAAW,EAAE,CAAC;QAChB,yEAAyE;QACzE,wEAAwE;QACxE,wEAAwE;QACxE,6EAA6E;QAC7E,OAAO,CACL,KAAC,YAAY,IACX,EAAE,EAAE,oBAAoB,EACxB,MAAM,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,KAAK,EAAE,EAAE,EACjE,OAAO,SACP,CACH,CAAA;IACH,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,oCAAoC,aACjD,MAAC,GAAG,IAAC,GAAG,EAAC,GAAG,EAAC,SAAS,EAAC,MAAM,aAC3B,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,aACZ,MAAC,GAAG,IAAC,GAAG,EAAC,GAAG,aACV,KAAC,OAAO,IAAC,IAAI,EAAC,SAAS,YAAE,SAAS,CAAC,gBAAgB,CAAC,GAAW,EAE/D,KAAC,eAAe,KAAG,EAClB,SAAS,CAAC,CAAC,CAAC,CAEX,MAAC,KAAK,IAAC,OAAO,EAAC,SAAS,aACtB,KAAC,cAAc,IAAC,SAAS,EAAC,QAAQ,GAAG,OAAE,SAAS,CAAC,MAAM,IACjD,CACT,CAAC,CAAC,CAAC,IAAI,IACJ,EACN,KAAC,IAAI,IAAC,IAAI,EAAC,OAAO,YACf,SAAS;oCACR,CAAC,CAAC,gGAAgG;oCAClG,CAAC,CAAC,uCAAuC,GACtC,IACD,EACR,KAAC,MAAM,KAAG,IACN,EAEL,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAC/B,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,EAAC,SAAS,EAAC,MAAM,aAC7B,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAC,IAAI,QAAC,SAAS,EAAC,WAAW,YACpD,SAAS,CAAC,0BAA0B,CAAC,GACjC,EACP,KAAC,GAAG,IAAC,GAAG,EAAC,GAAG,EAAC,IAAI,kBACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAClB,MAAC,IAAI,IAEH,EAAE,EAAE,oBAAoB,EACxB,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,KAAK,EAAE,EAAE,EACvD,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EACpC,SAAS,EAAC,qJAAqJ,aAE/J,eAAM,SAAS,EAAC,yGAAyG,YACtH,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAC1B,EACN,CAAC,CAAC,IAAI,KATF,CAAC,CAAC,EAAE,CAUJ,CACR,CAAC,GACE,IACA,CACT,CAAC,CAAC,CAAC,IAAI,EAEP,MAAM,CAAC,CAAC,CAAC,CACR,KAAC,gBAAgB,IACf,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC,SAAS,GAClF,CACH,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CACzB,KAAC,gBAAgB,IACf,KAAK,EAAC,OAAO,EACb,KAAK,EAAE,SAAS,CAAC,+BAA+B,CAAC,EACjD,WAAW,EACT,SAAS;oBACP,CAAC,CAAC,2HAA2H;oBAC7H,CAAC,CAAC,kJAAkJ,GAExJ,CACH,CAAC,CAAC,CAAC,CACF,cAAK,SAAS,EAAC,0CAA0C,YACtD,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACrB,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CACzB,KAAC,WAAW,IAAwB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAxC,KAAK,CAAC,OAAO,CAAC,EAAE,CAA4B,CAC/D,CAAC,CAAC,CAAC,CACF,KAAC,iBAAiB,IAAqC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAnD,UAAU,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAA0B,CAChF,CACF,GACG,CACP,IACG,CACP,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,EAAE,OAAO,EAAwB;IACpD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;IAC1B,+EAA+E;IAC/E,+EAA+E;IAC/E,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,OAAO,CACL,MAAC,IAAI,IAAC,SAAS,EAAC,mEAAmE,aACjF,MAAC,GAAG,IAAC,GAAG,EAAC,GAAG,aACV,eAAM,SAAS,EAAC,yGAAyG,YACtH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAChC,EACP,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,EAAC,SAAS,EAAC,SAAS,aAChC,KAAC,IAAI,IAAC,MAAM,EAAC,UAAU,EAAC,SAAS,EAAC,UAAU,YACzC,OAAO,CAAC,IAAI,GACR,EACP,KAAC,IAAI,IAAC,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,2BAA2B,YACrD,OAAO,CAAC,IAAI,GACR,IACD,EACR,KAAC,MAAM,KAAG,EACT,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAC,iBAAiB,KAAG,IAClC,EAEN,MAAC,GAAG,IAAC,GAAG,EAAC,GAAG,EAAC,SAAS,EAAC,uBAAuB,aAC5C,MAAC,KAAK,IAAC,OAAO,EAAC,SAAS,aACtB,KAAC,KAAK,IAAC,SAAS,EAAC,QAAQ,GAAG,OAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,IACvD,EACR,KAAC,MAAM,KAAG,IACN,EAEN,KAAC,MAAM,IAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,EAAC,IAAI,EAAC,OAAO,QAAC,SAAS,EAAC,MAAM,YACnF,KAAC,IAAI,IACH,EAAE,EAAE,oBAAoB,EACxB,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,KAAK,EAAE,EAAE,EAC7D,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,YAEzC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAC9C,8BACE,KAAC,KAAK,KAAG,OAAE,SAAS,CAAC,aAAa,CAAC,IAClC,CACJ,GACI,GACA,IACJ,CACR,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,EAAE,MAAM,EAAwC;IACzE,OAAO,CACL,MAAC,IAAI,IAAC,SAAS,EAAC,uCAAuC,aACrD,MAAC,GAAG,IAAC,GAAG,EAAC,GAAG,aACV,eAAM,SAAS,EAAC,0HAA0H,YACvI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAC/B,EACP,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,EAAC,SAAS,EAAC,SAAS,aAChC,KAAC,IAAI,IAAC,MAAM,EAAC,UAAU,EAAC,SAAS,EAAC,UAAU,YACzC,MAAM,CAAC,IAAI,GACP,EACP,KAAC,IAAI,IAAC,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,2BAA2B,YACrD,MAAM,CAAC,IAAI,GACP,IACD,EACR,KAAC,MAAM,KAAG,EACV,KAAC,KAAK,IAAC,OAAO,EAAC,SAAS,YAAE,SAAS,CAAC,8BAA8B,CAAC,GAAS,IACxE,EAEN,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,kHAGrB,EACP,MAAC,IAAI,IAAC,SAAS,EAAC,yCAAyC,wCAC/B,MAAM,CAAC,IAAI,IAC9B,IACF,CACR,CAAA;AACH,CAAC","sourcesContent":["import {\n  isExplicitLauncherVisit,\n  Link,\n  NavigateOnce,\n  STUDIO_PROJECT_ROUTE,\n  studioPath,\n  useLocation,\n} from '@elytracms/studio/router'\nimport { Globe, LogIn, TerminalSquare } from 'lucide-react'\nimport type { Project, ResolvedWorkspaceProject, SectionState } from '@elytracms/core/studio-core'\nimport { Badge, Button, Card, Code, Heading, Row, Spacer, Stack, Text } from '@elytracms/studio/ui'\nimport { hasProjectSession } from '@elytracms/studio/lib/auth'\nimport { launcherAutoForwardTarget } from '@elytracms/studio/lib/workspace'\nimport { translate } from '@elytracms/studio/lib/i18n'\nimport { PlaygroundBadge } from './playground-badge'\nimport { SignInNeededBadge } from './sign-in-needed-badge'\nimport { SectionStateView } from './section-state'\nimport { useStudio } from './studio-context'\nimport { useRecentProjects, useSwitcherEntries } from './workspace-projects'\n\nexport interface ProjectLauncherProps {\n  /** Force a deterministic list state for browser verification (?state=…). */\n  forcedState?: SectionState | null\n}\n\n/**\n * Studio launcher / project list (brief §4.3, §8.1; reframed by EC-154). The\n * Studio's front door: lists the workspace's projects and routes into a\n * project's shell. With a workspace config the list is config-driven\n * (configured projects ∩ grants, plus explicit \"not provisioned\" states);\n * project *creation* is code-first — `elytra.config.ts` + `builder init\n * --project <slug>` — so there is no in-UI create flow. Without a config the\n * adapter-backed list (and the starter-kit gallery) behaves as before.\n */\nexport function ProjectLauncher({ forcedState }: ProjectLauncherProps) {\n  const studio = useStudio()\n  const { entries, workspace } = useSwitcherEntries()\n\n  const hasConfig = workspace.kind === 'config'\n  const visible = entries\n  const recents = useRecentProjects(entries)\n  const location = useLocation()\n\n  const forced = forcedState && forcedState !== 'working' ? forcedState : null\n\n  // EC-401: a single-project workspace skips the launcher hop — the bare `/`\n  // hit forwards straight into the sole project (replace, so Back never loops\n  // through the launcher). Explicit \"all projects\" navigations carry the\n  // history-state marker and keep the launcher visible, as do forced `?state=`\n  // verification states and a lone UNPROVISIONED entry (its setup gate lives\n  // here). Activation/recents are recorded by the project screen on arrival.\n  const autoForward = launcherAutoForwardTarget({\n    entries,\n    forcedState: forcedState != null,\n    explicitVisit: isExplicitLauncherVisit(location.state),\n  })\n  if (autoForward) {\n    // EC-441: `NavigateOnce`, not `<Navigate>` — on a slow boot the launcher\n    // stays mounted while the project splat's modules load, re-rendering on\n    // every router-store tick; a per-render re-navigate compounded into the\n    // \"Maximum update depth exceeded\" rejection (104 re-fires on one cold load).\n    return (\n      <NavigateOnce\n        to={STUDIO_PROJECT_ROUTE}\n        params={{ projectId: autoForward.id, _splat: studioPath.index() }}\n        replace\n      />\n    )\n  }\n\n  return (\n    <div className=\"mx-auto w-full max-w-6xl px-6 py-8\">\n      <Row gap=\"3\" className=\"mb-6\">\n        <Stack gap=\"1\">\n          <Row gap=\"2\">\n            <Heading size=\"display\">{translate('shell.projects')}</Heading>\n            {/* EC-153: explicit playground-mode marker (renders nothing on Convex). */}\n            <PlaygroundBadge />\n            {hasConfig ? (\n              // EC-154: this workspace is defined in code.\n              <Badge variant=\"outline\">\n                <TerminalSquare className=\"size-3\" /> {workspace.source}\n              </Badge>\n            ) : null}\n          </Row>\n          <Text tone=\"muted\">\n            {hasConfig\n              ? 'Projects are defined in code. Add entries to elytra.config.ts and provision them with the CLI.'\n              : 'Open and manage your Elytra projects.'}\n          </Text>\n        </Stack>\n        <Spacer />\n      </Row>\n\n      {recents.length > 0 && !forced ? (\n        <Stack gap=\"2\" className=\"mb-6\">\n          <Text size=\"xs\" tone=\"muted\" mono className=\"uppercase\">\n            {translate('shell.projectList.recent')}\n          </Text>\n          <Row gap=\"2\" wrap>\n            {recents.map((p) => (\n              <Link\n                key={p.id}\n                to={STUDIO_PROJECT_ROUTE}\n                params={{ projectId: p.id, _splat: studioPath.index() }}\n                onClick={() => studio.activate(p.id)}\n                className=\"inline-flex items-center gap-2 rounded-md border border-border bg-card px-3 py-1.5 text-sm transition-colors hover:border-primary/40 hover:bg-muted\"\n              >\n                <span className=\"grid size-4 place-items-center rounded-[4px] bg-primary text-[0.6rem] font-bold text-primary-foreground\">\n                  {p.name.charAt(0).toUpperCase()}\n                </span>\n                {p.name}\n              </Link>\n            ))}\n          </Row>\n        </Stack>\n      ) : null}\n\n      {forced ? (\n        <SectionStateView\n          state={forced}\n          title={forced === 'empty' ? translate('shell.projectList.empty.title') : undefined}\n        />\n      ) : visible.length === 0 ? (\n        <SectionStateView\n          state=\"empty\"\n          title={translate('shell.projectList.empty.title')}\n          description={\n            hasConfig\n              ? 'The workspace config declares no visible projects. Add an entry to elytra.config.ts, or ask an admin to grant you access.'\n              : 'No active projects. Create one from the CLI: run `builder init` in your repo to scaffold elytra.config.ts, then `builder init --project <slug>`.'\n          }\n        />\n      ) : (\n        <div className=\"grid gap-4 sm:grid-cols-2 lg:grid-cols-3\">\n          {visible.map((entry) =>\n            entry.kind === 'project' ? (\n              <ProjectCard key={entry.project.id} project={entry.project} />\n            ) : (\n              <UnprovisionedCard key={`config:${entry.config.slug}`} config={entry.config} />\n            ),\n          )}\n        </div>\n      )}\n    </div>\n  )\n}\n\nfunction ProjectCard({ project }: { project: Project }) {\n  const studio = useStudio()\n  // Per-backend sign-in state (EC-179): one project per backend, so a project on\n  // a deployment the user hasn't authenticated into shows \"Sign in\", not \"Open\".\n  const authed = hasProjectSession(project.slug)\n  return (\n    <Card className=\"flex flex-col gap-3 p-4 transition-colors hover:border-primary/30\">\n      <Row gap=\"2\">\n        <span className=\"grid size-8 shrink-0 place-items-center rounded-lg bg-primary text-sm font-bold text-primary-foreground\">\n          {project.name.charAt(0).toUpperCase()}\n        </span>\n        <Stack gap=\"1\" className=\"min-w-0\">\n          <Text weight=\"semibold\" className=\"truncate\">\n            {project.name}\n          </Text>\n          <Code tone=\"muted\" className=\"w-fit max-w-full truncate\">\n            {project.slug}\n          </Code>\n        </Stack>\n        <Spacer />\n        {authed ? null : <SignInNeededBadge />}\n      </Row>\n\n      <Row gap=\"2\" className=\"text-muted-foreground\">\n        <Badge variant=\"outline\">\n          <Globe className=\"size-3\" /> {project.settings.locales.length}\n        </Badge>\n        <Spacer />\n      </Row>\n\n      <Button variant={authed ? 'secondary' : 'default'} size=\"sm\" asChild className=\"mt-1\">\n        <Link\n          to={STUDIO_PROJECT_ROUTE}\n          params={{ projectId: project.id, _splat: studioPath.index() }}\n          onClick={() => studio.activate(project.id)}\n        >\n          {authed ? translate('shell.projectCard.open') : (\n            <>\n              <LogIn /> {translate('auth.signIn')}\n            </>\n          )}\n        </Link>\n      </Button>\n    </Card>\n  )\n}\n\n/**\n * A configured project that has no backend project yet (EC-154): an explicit,\n * deterministic state pointing at the CLI provisioning flow — never an error.\n */\nfunction UnprovisionedCard({ config }: { config: ResolvedWorkspaceProject }) {\n  return (\n    <Card className=\"flex flex-col gap-3 border-dashed p-4\">\n      <Row gap=\"2\">\n        <span className=\"grid size-8 shrink-0 place-items-center rounded-lg border border-border bg-muted text-sm font-bold text-muted-foreground\">\n          {config.name.charAt(0).toUpperCase()}\n        </span>\n        <Stack gap=\"1\" className=\"min-w-0\">\n          <Text weight=\"semibold\" className=\"truncate\">\n            {config.name}\n          </Text>\n          <Code tone=\"muted\" className=\"w-fit max-w-full truncate\">\n            {config.slug}\n          </Code>\n        </Stack>\n        <Spacer />\n        <Badge variant=\"outline\">{translate('shell.project.notProvisioned')}</Badge>\n      </Row>\n\n      <Text size=\"sm\" tone=\"muted\">\n        Declared in the workspace config, but no backend project exists yet. Provision it from your\n        repo:\n      </Text>\n      <Code className=\"block w-fit max-w-full truncate text-xs\">\n        builder init --project {config.slug}\n      </Code>\n    </Card>\n  )\n}\n"]}

package/dist/components/studio-project-screen.js

@@ -1,6 +1,6 @@
 import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
 import { useEffect } from 'react';
-import { launcherVisitState, Link, Navigate, STUDIO_PROJECT_ROUTE, useParams, useSearch, } from '@elytracms/studio/router';
+import { launcherVisitState, Link, NavigateOnce, STUDIO_PROJECT_ROUTE, useParams, useSearch, } from '@elytracms/studio/router';
 import { matchStudioRoute } from '@elytracms/studio/router/match';
 import { studioSearch } from '@elytracms/studio/router/search';
 import { Button, Heading, Stack, Text } from '@elytracms/studio/ui';
@@ -80,7 +80,9 @@ function StudioSectionResolver({ project, match, search, }) {
     const nav = useStudioNav(project);
     if (match.section === 'index') {
         // Bare `/$projectId` → the project's first navigable rail view.
-        return (_jsx(Navigate, { to: STUDIO_PROJECT_ROUTE, params: { projectId, _splat: landingViewId(nav, project) }, replace: true }));
+        // EC-441: `NavigateOnce` — this resolver re-renders while the landing
+        // view's transition is pending; a per-render `<Navigate>` re-fires each time.
+        return (_jsx(NavigateOnce, { to: STUDIO_PROJECT_ROUTE, params: { projectId, _splat: landingViewId(nav, project) }, replace: true }));
     }
     const view = nav.registry.get(match.viewId);
     if (!view)

package/dist/components/studio-project-screen.js.map

@@ -1 +1 @@
-{"version":3,"file":"studio-project-screen.js","sourceRoot":"","sources":["../../src/components/studio-project-screen.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAGjC,OAAO,EACL,kBAAkB,EAClB,IAAI,EACJ,QAAQ,EACR,oBAAoB,EACpB,SAAS,EACT,SAAS,GACV,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AAEjE,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAA;AAE9D,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAA;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAEjE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAA4C,CAAA;IACtF,6EAA6E;IAC7E,gFAAgF;IAChF,gFAAgF;IAChF,gFAAgF;IAChF,2EAA2E;IAC3E,iDAAiD;IACjD,MAAM,SAAS,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAA4B,CAAA;IACzE,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;IAC1B,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAA;IACxC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;IAE5C,kFAAkF;IAClF,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,OAAO;YAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC1C,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;IAErB,IAAI,CAAC,OAAO;QAAE,OAAO,KAAC,eAAe,KAAG,CAAA;IAExC,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;IACnD,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;IAEtC,OAAO,CACL,KAAC,WAAW,IAAC,OAAO,EAAE,OAAO,YAM3B,KAAC,sBAAsB,IAAkB,SAAS,EAAE,OAAO,CAAC,EAAE,YAC5D,KAAC,gBAAgB,IAAC,OAAO,EAAE,OAAO,YAChC,KAAC,qBAAqB,IAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,GAAI,GACxD,IAHQ,OAAO,CAAC,EAAE,CAId,GACb,CACf,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,gBAAgB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAA6C;IACxF,OAAO,CAGL,KAAC,YAAY,IAAkB,SAAS,EAAE,OAAO,CAAC,EAAE,YAIlD,KAAC,cAAc,IAAkB,SAAS,EAAE,OAAO,CAAC,EAAE,YACpD,KAAC,cAAc,IAAkB,SAAS,EAAE,OAAO,CAAC,EAAE,YACnD,QAAQ,IADU,OAAO,CAAC,EAAE,CAEd,IAHE,OAAO,CAAC,EAAE,CAId,IARA,OAAO,CAAC,EAAE,CASd,CAChB,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,qBAAqB,CAAC,EAC7B,OAAO,EACP,KAAK,EACL,MAAM,GAKP;IACC,MAAM,SAAS,GAAG,OAAO,CAAC,EAAE,CAAA;IAC5B,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IAEjC,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC9B,gEAAgE;QAChE,OAAO,CACL,KAAC,QAAQ,IACP,EAAE,EAAE,oBAAoB,EACxB,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAC1D,OAAO,SACP,CACH,CAAA;IACH,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAC,mBAAmB,KAAG,CAAA;IAEzC,wEAAwE;IACxE,oFAAoF;IACpF,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC7D,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,KAAC,mBAAmB,KAAG,CAAA;IAErD,OAAO,4BAAG,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,GAAI,CAAA;AACrE,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,CACL,cAAK,SAAS,EAAC,uCAAuC,YACpD,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,EAAC,KAAK,EAAC,QAAQ,EAAC,SAAS,EAAC,sBAAsB,aAC5D,KAAC,OAAO,IAAC,IAAI,EAAC,SAAS,YAAE,SAAS,CAAC,6BAA6B,CAAC,GAAW,EAC5E,KAAC,IAAI,IAAC,IAAI,EAAC,OAAO,YAAE,SAAS,CAAC,4BAA4B,CAAC,GAAQ,EACnE,KAAC,MAAM,IAAC,OAAO,kBAGb,KAAC,IAAI,IAAC,EAAE,EAAC,GAAG,EAAC,KAAK,EAAE,kBAAkB,YACnC,SAAS,CAAC,sBAAsB,CAAC,GAC7B,GACA,IACH,GACJ,CACP,CAAA;AACH,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO,CACL,cAAK,SAAS,EAAC,oCAAoC,YACjD,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,EAAC,KAAK,EAAC,QAAQ,EAAC,SAAS,EAAC,sBAAsB,aAC5D,KAAC,OAAO,IAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAC,IAAI,YACzB,SAAS,CAAC,2BAA2B,CAAC,GAC/B,EACV,KAAC,IAAI,IAAC,IAAI,EAAC,OAAO,YAAE,SAAS,CAAC,0BAA0B,CAAC,GAAQ,IAC3D,GACJ,CACP,CAAA;AACH,CAAC","sourcesContent":["import { useEffect } from 'react'\nimport type { ReactNode } from 'react'\nimport type { Project } from '@elytracms/core/studio-core'\nimport {\n  launcherVisitState,\n  Link,\n  Navigate,\n  STUDIO_PROJECT_ROUTE,\n  useParams,\n  useSearch,\n} from '@elytracms/studio/router'\nimport { matchStudioRoute } from '@elytracms/studio/router/match'\nimport type { StudioRouteMatch } from '@elytracms/studio/router/match'\nimport { studioSearch } from '@elytracms/studio/router/search'\nimport type { StudioSearch } from '@elytracms/studio/router/search'\nimport { Button, Heading, Stack, Text } from '@elytracms/studio/ui'\nimport { DataProvider } from '@elytracms/studio/lib/data'\nimport { translate } from '@elytracms/studio/lib/i18n'\nimport { useStudio } from './studio-context'\nimport { StudioShell } from './studio-shell'\nimport { AssetsProvider } from './assets/assets-store'\nimport { CollabProvider } from './collab/collab-context'\nimport { ProjectSessionProvider } from './project-session'\nimport { flatPath } from './app-views/module'\nimport { landingViewId, useStudioNav } from './app-views/sidebar'\n\n/**\n * EC-223 Stage 6 (catch-all routing): the studio's per-project route component.\n *\n * The consumer mounts ONE splat route (`/$projectId/$`) whose component is this.\n * Everything that was a per-project file route — the provider stack, the section\n * rail shell, and every section screen — now lives inside the package and is\n * resolved here from the URL. The consumer's route tree shrinks to a single\n * ~10-line mount, which is the whole point of Stage 6: the engine owns its\n * navigation, so an external repo consumes the studio without rebuilding a route\n * file per screen.\n *\n * `projectId` stays a real route param (the `$projectId` segment); the trailing\n * pathname (`_splat`) is matched against the engine route table\n * (`matchStudioRoute`) into a module id + segments, and the active module (EC-239)\n * resolves the screen. Every surface already takes its ids as props, so the\n * resolver just hands the module its parsed deep-link.\n */\nexport function StudioProjectScreen() {\n  const params = useParams({ strict: false }) as { projectId?: string; _splat?: string }\n  // The route's VALIDATED search (the splat's `validateSearch: studioSearch`).\n  // Read it through `useSearch`, not `useLocation().search`: the validated search\n  // is resolved at route-match time and stable from the component's first render,\n  // whereas `location.search` can lag a tick during hydration — long enough for a\n  // child `<Navigate>` (the builder redirect) to fire on a momentarily-empty\n  // search and drop its `?page=` deep-link target.\n  const rawSearch = useSearch({ strict: false }) as Record<string, unknown>\n  const studio = useStudio()\n  const projectId = params.projectId ?? ''\n  const project = studio.getProject(projectId)\n\n  // Record the active project once it resolves (preserves recents across sections).\n  useEffect(() => {\n    if (project) studio.activate(project.id)\n  }, [project, studio])\n\n  if (!project) return <ProjectNotFound />\n\n  const match = matchStudioRoute(params._splat ?? '')\n  const search = studioSearch(rawSearch)\n\n  return (\n    <StudioShell project={project}>\n      {/* EC-177 gap 1: in Convex mode the session HYDRATES from persistence\n          before any provider mounts — the builder boots from the latest\n          persisted revision, publishing reflects the persisted state, and the\n          preview content engine serves live documents. Playground renders\n          synchronously from fixtures (session: null), exactly as before. */}\n      <ProjectSessionProvider key={project.id} projectId={project.id}>\n        <ProjectProviders project={project}>\n          <StudioSectionResolver project={project} match={match} search={search} />\n        </ProjectProviders>\n      </ProjectSessionProvider>\n    </StudioShell>\n  )\n}\n\n/**\n * The per-project provider stack, mounted once the session source is known.\n *\n * EC-287: there is no project-level builder graph anymore — layouts are code and\n * the DB holds content only. The block-field canvas mounts its OWN scoped\n * `BuilderProvider` per document (`composition-field-editor`), so no graph is\n * threaded here. `CollabProvider` stays as the canvas's session-scoped\n * presence/perspective store, seeded graph-lessly.\n */\nfunction ProjectProviders({ project, children }: { project: Project; children: ReactNode }) {\n  return (\n    // Key by project id so the session data sources reset when switching projects.\n    // The data store hydrates/persists this project's `cms-data-sources` records.\n    <DataProvider key={project.id} projectId={project.id}>\n      {/* EC-195: project-level so the canvas resolves `asset`-typed Image props\n          and the inspector picks from the live library — not just the Assets\n          section. Asset METADATA only (small); blobs stay lazy. */}\n      <AssetsProvider key={project.id} projectId={project.id}>\n        <CollabProvider key={project.id} projectId={project.id}>\n          {children}\n        </CollabProvider>\n      </AssetsProvider>\n    </DataProvider>\n  )\n}\n\n/**\n * The URL→screen switch (EC-223 Stage 6), driven by the view registry DERIVED from\n * the section rail (EC-237/239). The bare project URL redirects to the first\n * navigable rail view; otherwise the matched view id is resolved from the registry\n * (rail views + always-on built-ins) and its `parsePath` interprets the trailing\n * segments into a deep-link the view renders. An unknown view id or an unparseable\n * path is a not-found; rail CONFIG problems (duplicate/invalid views) surface as\n * visible issues in the shell, never silently. Renders inside the shell + provider\n * stack, so every surface sees the same live CMS store and breadcrumb context.\n */\nfunction StudioSectionResolver({\n  project,\n  match,\n  search,\n}: {\n  project: Project\n  match: StudioRouteMatch\n  search: StudioSearch\n}) {\n  const projectId = project.id\n  const nav = useStudioNav(project)\n\n  if (match.section === 'index') {\n    // Bare `/$projectId` → the project's first navigable rail view.\n    return (\n      <Navigate\n        to={STUDIO_PROJECT_ROUTE}\n        params={{ projectId, _splat: landingViewId(nav, project) }}\n        replace\n      />\n    )\n  }\n\n  const view = nav.registry.get(match.viewId)\n  if (!view) return <StudioRouteNotFound />\n\n  // A flat view (no `parsePath`) accepts only the bare path; a nested one\n  // (CMS/components) interprets its segments. `null` → an over-deep path → not-found.\n  const deepLink = (view.parsePath ?? flatPath)(match.segments)\n  if (deepLink === null) return <StudioRouteNotFound />\n\n  return <>{view.render({ project, projectId, deepLink, search })}</>\n}\n\nfunction ProjectNotFound() {\n  return (\n    <div className=\"grid min-h-dvh place-items-center p-8\">\n      <Stack gap=\"3\" align=\"center\" className=\"max-w-sm text-center\">\n        <Heading size=\"display\">{translate('shell.projectNotFound.title')}</Heading>\n        <Text tone=\"muted\">{translate('shell.projectNotFound.body')}</Text>\n        <Button asChild>\n          {/* EC-401: an explicit \"back to projects\" navigation — marked so the\n              launcher's single-project auto-forward never bounces it back. */}\n          <Link to=\"/\" state={launcherVisitState}>\n            {translate('shell.backToProjects')}\n          </Link>\n        </Button>\n      </Stack>\n    </div>\n  )\n}\n\nfunction StudioRouteNotFound() {\n  return (\n    <div className=\"grid h-full place-items-center p-8\">\n      <Stack gap=\"2\" align=\"center\" className=\"max-w-sm text-center\">\n        <Heading level={2} size=\"h2\">\n          {translate('shell.routeNotFound.title')}\n        </Heading>\n        <Text tone=\"muted\">{translate('shell.routeNotFound.body')}</Text>\n      </Stack>\n    </div>\n  )\n}\n"]}
+{"version":3,"file":"studio-project-screen.js","sourceRoot":"","sources":["../../src/components/studio-project-screen.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAGjC,OAAO,EACL,kBAAkB,EAClB,IAAI,EACJ,YAAY,EACZ,oBAAoB,EACpB,SAAS,EACT,SAAS,GACV,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AAEjE,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAA;AAE9D,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAA;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAEjE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAA4C,CAAA;IACtF,6EAA6E;IAC7E,gFAAgF;IAChF,gFAAgF;IAChF,gFAAgF;IAChF,2EAA2E;IAC3E,iDAAiD;IACjD,MAAM,SAAS,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAA4B,CAAA;IACzE,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;IAC1B,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAA;IACxC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;IAE5C,kFAAkF;IAClF,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,OAAO;YAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC1C,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;IAErB,IAAI,CAAC,OAAO;QAAE,OAAO,KAAC,eAAe,KAAG,CAAA;IAExC,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;IACnD,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;IAEtC,OAAO,CACL,KAAC,WAAW,IAAC,OAAO,EAAE,OAAO,YAM3B,KAAC,sBAAsB,IAAkB,SAAS,EAAE,OAAO,CAAC,EAAE,YAC5D,KAAC,gBAAgB,IAAC,OAAO,EAAE,OAAO,YAChC,KAAC,qBAAqB,IAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,GAAI,GACxD,IAHQ,OAAO,CAAC,EAAE,CAId,GACb,CACf,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,gBAAgB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAA6C;IACxF,OAAO,CAGL,KAAC,YAAY,IAAkB,SAAS,EAAE,OAAO,CAAC,EAAE,YAIlD,KAAC,cAAc,IAAkB,SAAS,EAAE,OAAO,CAAC,EAAE,YACpD,KAAC,cAAc,IAAkB,SAAS,EAAE,OAAO,CAAC,EAAE,YACnD,QAAQ,IADU,OAAO,CAAC,EAAE,CAEd,IAHE,OAAO,CAAC,EAAE,CAId,IARA,OAAO,CAAC,EAAE,CASd,CAChB,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,qBAAqB,CAAC,EAC7B,OAAO,EACP,KAAK,EACL,MAAM,GAKP;IACC,MAAM,SAAS,GAAG,OAAO,CAAC,EAAE,CAAA;IAC5B,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IAEjC,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC9B,gEAAgE;QAChE,sEAAsE;QACtE,8EAA8E;QAC9E,OAAO,CACL,KAAC,YAAY,IACX,EAAE,EAAE,oBAAoB,EACxB,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAC1D,OAAO,SACP,CACH,CAAA;IACH,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAC,mBAAmB,KAAG,CAAA;IAEzC,wEAAwE;IACxE,oFAAoF;IACpF,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC7D,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,KAAC,mBAAmB,KAAG,CAAA;IAErD,OAAO,4BAAG,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,GAAI,CAAA;AACrE,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,CACL,cAAK,SAAS,EAAC,uCAAuC,YACpD,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,EAAC,KAAK,EAAC,QAAQ,EAAC,SAAS,EAAC,sBAAsB,aAC5D,KAAC,OAAO,IAAC,IAAI,EAAC,SAAS,YAAE,SAAS,CAAC,6BAA6B,CAAC,GAAW,EAC5E,KAAC,IAAI,IAAC,IAAI,EAAC,OAAO,YAAE,SAAS,CAAC,4BAA4B,CAAC,GAAQ,EACnE,KAAC,MAAM,IAAC,OAAO,kBAGb,KAAC,IAAI,IAAC,EAAE,EAAC,GAAG,EAAC,KAAK,EAAE,kBAAkB,YACnC,SAAS,CAAC,sBAAsB,CAAC,GAC7B,GACA,IACH,GACJ,CACP,CAAA;AACH,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO,CACL,cAAK,SAAS,EAAC,oCAAoC,YACjD,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,EAAC,KAAK,EAAC,QAAQ,EAAC,SAAS,EAAC,sBAAsB,aAC5D,KAAC,OAAO,IAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAC,IAAI,YACzB,SAAS,CAAC,2BAA2B,CAAC,GAC/B,EACV,KAAC,IAAI,IAAC,IAAI,EAAC,OAAO,YAAE,SAAS,CAAC,0BAA0B,CAAC,GAAQ,IAC3D,GACJ,CACP,CAAA;AACH,CAAC","sourcesContent":["import { useEffect } from 'react'\nimport type { ReactNode } from 'react'\nimport type { Project } from '@elytracms/core/studio-core'\nimport {\n  launcherVisitState,\n  Link,\n  NavigateOnce,\n  STUDIO_PROJECT_ROUTE,\n  useParams,\n  useSearch,\n} from '@elytracms/studio/router'\nimport { matchStudioRoute } from '@elytracms/studio/router/match'\nimport type { StudioRouteMatch } from '@elytracms/studio/router/match'\nimport { studioSearch } from '@elytracms/studio/router/search'\nimport type { StudioSearch } from '@elytracms/studio/router/search'\nimport { Button, Heading, Stack, Text } from '@elytracms/studio/ui'\nimport { DataProvider } from '@elytracms/studio/lib/data'\nimport { translate } from '@elytracms/studio/lib/i18n'\nimport { useStudio } from './studio-context'\nimport { StudioShell } from './studio-shell'\nimport { AssetsProvider } from './assets/assets-store'\nimport { CollabProvider } from './collab/collab-context'\nimport { ProjectSessionProvider } from './project-session'\nimport { flatPath } from './app-views/module'\nimport { landingViewId, useStudioNav } from './app-views/sidebar'\n\n/**\n * EC-223 Stage 6 (catch-all routing): the studio's per-project route component.\n *\n * The consumer mounts ONE splat route (`/$projectId/$`) whose component is this.\n * Everything that was a per-project file route — the provider stack, the section\n * rail shell, and every section screen — now lives inside the package and is\n * resolved here from the URL. The consumer's route tree shrinks to a single\n * ~10-line mount, which is the whole point of Stage 6: the engine owns its\n * navigation, so an external repo consumes the studio without rebuilding a route\n * file per screen.\n *\n * `projectId` stays a real route param (the `$projectId` segment); the trailing\n * pathname (`_splat`) is matched against the engine route table\n * (`matchStudioRoute`) into a module id + segments, and the active module (EC-239)\n * resolves the screen. Every surface already takes its ids as props, so the\n * resolver just hands the module its parsed deep-link.\n */\nexport function StudioProjectScreen() {\n  const params = useParams({ strict: false }) as { projectId?: string; _splat?: string }\n  // The route's VALIDATED search (the splat's `validateSearch: studioSearch`).\n  // Read it through `useSearch`, not `useLocation().search`: the validated search\n  // is resolved at route-match time and stable from the component's first render,\n  // whereas `location.search` can lag a tick during hydration — long enough for a\n  // child `<Navigate>` (the builder redirect) to fire on a momentarily-empty\n  // search and drop its `?page=` deep-link target.\n  const rawSearch = useSearch({ strict: false }) as Record<string, unknown>\n  const studio = useStudio()\n  const projectId = params.projectId ?? ''\n  const project = studio.getProject(projectId)\n\n  // Record the active project once it resolves (preserves recents across sections).\n  useEffect(() => {\n    if (project) studio.activate(project.id)\n  }, [project, studio])\n\n  if (!project) return <ProjectNotFound />\n\n  const match = matchStudioRoute(params._splat ?? '')\n  const search = studioSearch(rawSearch)\n\n  return (\n    <StudioShell project={project}>\n      {/* EC-177 gap 1: in Convex mode the session HYDRATES from persistence\n          before any provider mounts — the builder boots from the latest\n          persisted revision, publishing reflects the persisted state, and the\n          preview content engine serves live documents. Playground renders\n          synchronously from fixtures (session: null), exactly as before. */}\n      <ProjectSessionProvider key={project.id} projectId={project.id}>\n        <ProjectProviders project={project}>\n          <StudioSectionResolver project={project} match={match} search={search} />\n        </ProjectProviders>\n      </ProjectSessionProvider>\n    </StudioShell>\n  )\n}\n\n/**\n * The per-project provider stack, mounted once the session source is known.\n *\n * EC-287: there is no project-level builder graph anymore — layouts are code and\n * the DB holds content only. The block-field canvas mounts its OWN scoped\n * `BuilderProvider` per document (`composition-field-editor`), so no graph is\n * threaded here. `CollabProvider` stays as the canvas's session-scoped\n * presence/perspective store, seeded graph-lessly.\n */\nfunction ProjectProviders({ project, children }: { project: Project; children: ReactNode }) {\n  return (\n    // Key by project id so the session data sources reset when switching projects.\n    // The data store hydrates/persists this project's `cms-data-sources` records.\n    <DataProvider key={project.id} projectId={project.id}>\n      {/* EC-195: project-level so the canvas resolves `asset`-typed Image props\n          and the inspector picks from the live library — not just the Assets\n          section. Asset METADATA only (small); blobs stay lazy. */}\n      <AssetsProvider key={project.id} projectId={project.id}>\n        <CollabProvider key={project.id} projectId={project.id}>\n          {children}\n        </CollabProvider>\n      </AssetsProvider>\n    </DataProvider>\n  )\n}\n\n/**\n * The URL→screen switch (EC-223 Stage 6), driven by the view registry DERIVED from\n * the section rail (EC-237/239). The bare project URL redirects to the first\n * navigable rail view; otherwise the matched view id is resolved from the registry\n * (rail views + always-on built-ins) and its `parsePath` interprets the trailing\n * segments into a deep-link the view renders. An unknown view id or an unparseable\n * path is a not-found; rail CONFIG problems (duplicate/invalid views) surface as\n * visible issues in the shell, never silently. Renders inside the shell + provider\n * stack, so every surface sees the same live CMS store and breadcrumb context.\n */\nfunction StudioSectionResolver({\n  project,\n  match,\n  search,\n}: {\n  project: Project\n  match: StudioRouteMatch\n  search: StudioSearch\n}) {\n  const projectId = project.id\n  const nav = useStudioNav(project)\n\n  if (match.section === 'index') {\n    // Bare `/$projectId` → the project's first navigable rail view.\n    // EC-441: `NavigateOnce` — this resolver re-renders while the landing\n    // view's transition is pending; a per-render `<Navigate>` re-fires each time.\n    return (\n      <NavigateOnce\n        to={STUDIO_PROJECT_ROUTE}\n        params={{ projectId, _splat: landingViewId(nav, project) }}\n        replace\n      />\n    )\n  }\n\n  const view = nav.registry.get(match.viewId)\n  if (!view) return <StudioRouteNotFound />\n\n  // A flat view (no `parsePath`) accepts only the bare path; a nested one\n  // (CMS/components) interprets its segments. `null` → an over-deep path → not-found.\n  const deepLink = (view.parsePath ?? flatPath)(match.segments)\n  if (deepLink === null) return <StudioRouteNotFound />\n\n  return <>{view.render({ project, projectId, deepLink, search })}</>\n}\n\nfunction ProjectNotFound() {\n  return (\n    <div className=\"grid min-h-dvh place-items-center p-8\">\n      <Stack gap=\"3\" align=\"center\" className=\"max-w-sm text-center\">\n        <Heading size=\"display\">{translate('shell.projectNotFound.title')}</Heading>\n        <Text tone=\"muted\">{translate('shell.projectNotFound.body')}</Text>\n        <Button asChild>\n          {/* EC-401: an explicit \"back to projects\" navigation — marked so the\n              launcher's single-project auto-forward never bounces it back. */}\n          <Link to=\"/\" state={launcherVisitState}>\n            {translate('shell.backToProjects')}\n          </Link>\n        </Button>\n      </Stack>\n    </div>\n  )\n}\n\nfunction StudioRouteNotFound() {\n  return (\n    <div className=\"grid h-full place-items-center p-8\">\n      <Stack gap=\"2\" align=\"center\" className=\"max-w-sm text-center\">\n        <Heading level={2} size=\"h2\">\n          {translate('shell.routeNotFound.title')}\n        </Heading>\n        <Text tone=\"muted\">{translate('shell.routeNotFound.body')}</Text>\n      </Stack>\n    </div>\n  )\n}\n"]}

package/dist/lib/collection-view/collection-view-source.d.ts

@@ -232,6 +232,16 @@ export interface ResolvedAsset {
 export interface PublishingCapability {
     /** Published-ness from the version pointer (NOT a row field). */
     isPublished(ref: DocumentRef): boolean;
+    /**
+     * Does this PUBLISHED document's working draft carry unpublished changes
+     * (EC-449)? The cheap per-row signal behind the amber "changed" `$state` dot —
+     * sourced from the MATERIALIZED `hasUnpublishedChanges` record flag (computed
+     * once at the write chokepoint), never a per-row snapshot compare. Optional: a
+     * source without the signal omits it, and the list derives only
+     * published/draft (exactly the pre-EC-449 rendering). Same referentially-stable
+     * per-ref accessor shape as {@link isPublished}.
+     */
+    hasUnpublishedChanges?(ref: DocumentRef): boolean;
     publish(ref: DocumentRef): Promise<void>;
     unpublish(ref: DocumentRef): Promise<void>;
     /**

package/dist/lib/collection-view/collection-view-source.js.map

@@ -1 +1 @@
-{"version":3,"file":"collection-view-source.js","sourceRoot":"","sources":["../../../src/lib/collection-view/collection-view-source.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAkOvD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA4B,EAC5B,KAAe,EACf,MAAoB;IAEpB,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;AACjG,CAAC;AAuCD;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA4B;IACjE,OAAO,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE;QAClC,UAAU,EAAE,MAAM,CAAC,UAAU,KAAK,SAAS;QAC3C,UAAU,EAAE,MAAM,CAAC,UAAU,KAAK,SAAS;QAC3C,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,OAAO;KACtC,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import type {\n  CmsDocument,\n  CollectionDef,\n  DocumentRef,\n  DocumentUrl,\n  FieldDef,\n  Locale,\n  LocaleConfig,\n  LocalizedString,\n  RestoreScope,\n} from '@elytracms/core/cms-core'\nimport type { CmsValidationIssue } from '@elytracms/core/cms-core'\nimport type { OperationError } from '@elytracms/core/operations'\nimport type { ReferenceTarget } from '@elytracms/core/persistence'\nimport type { TableViewState } from '../cms-views/view-model'\nimport { pseudoColumns } from '../cms-views/view-model'\n// The concrete inline-edit + bulk vocabulary (Stream A relocates it into `lib` as it settles).\nimport type { CellCommitInput, CellCommitOutcome } from '../../components/cms/cell-edit'\nimport type { BulkAction, BulkReport, BulkSetField } from '../../components/cms/bulk-actions'\nimport type { DocumentVersionsView, ImportReport } from '../../components/cms/cms-store'\n\n/**\n * `CollectionViewSource` — the studio's UNIVERSAL interaction seam (EC-240,\n * vision AD-19).\n *\n * The list surface (`CollectionTable`) and the edit-shell (`DetailEditor`) are\n * the studio's universal interaction surfaces. Historically they read the\n * concrete `CmsStore` through `useCms()`, so they only served `cmsDocuments`.\n * This interface is the data-agnostic seam they render over instead, so the SAME\n * surfaces drive the users rail (EC-240), redirects (EC-303), the Components app\n * edit-shell, and any future rail — no hand-rolled UI per rail.\n *\n * **Shape:** the source is scoped to ONE collection (it carries `schema` +\n * `collectionId`), and its methods mirror the subset of `CmsStore` the surfaces\n * actually use — dropping the `collectionId` argument (the source already knows\n * it). Keeping the names/signatures aligned makes the CMS adapter a\n * behaviour-preserving pass-through and the migration near-mechanical.\n *\n * **Referential stability:** the surfaces put `documents`, `isPublished`,\n * `localeConfig`, etc. in `useMemo` dependency arrays. An implementation MUST\n * return stable references across renders (delegate to the underlying store's\n * already-stable methods; never wrap in a fresh closure each render) or memos\n * bust and the inline-edit order snapshot / perf regress.\n *\n * **Capabilities:** flags gate whole shell regions AND method presence — a source\n * with `capabilities.versions === false` (the users rail) never mounts the\n * Versions pane, so no `listVersions` read fires on credential records. Optional\n * method groups are present iff the flag is set.\n */\nexport interface CollectionViewSource {\n  /** The rail/collection this source serves. */\n  readonly collectionId: string\n  /** The schema lens: fields, form tabs/groups, `titleField`, display nouns. */\n  readonly schema: CollectionDef\n  /** Which regions/methods this source supports. */\n  readonly capabilities: CollectionViewCapabilities\n\n  /** The project scope (asset picker, published-pool queries). Absent in fixture sessions. */\n  readonly projectId?: string\n  /**\n   * The collection id assets live in (for a cell/field's `titleOf` label fallback\n   * when {@link resolveAsset} finds no record). Present only for sources that\n   * reference assets — a rail without assets (users) omits it.\n   */\n  readonly assetCollectionId?: string\n  /** The ambient locale lens (only meaningful when `capabilities.locales`). */\n  readonly localeConfig: LocaleConfig\n  readonly activeLocale: Locale\n\n  // --- Reads -----------------------------------------------------------------\n  /** The full row set (view mechanics filter/sort this client-side). */\n  documents(): CmsDocument[]\n  get(ref: DocumentRef): CmsDocument | undefined\n  /** A relation/asset target's display title (hides the string-vs-function `titleField`). */\n  titleOf(ref: DocumentRef): string\n  /**\n   * List the candidate records of a relation field's declared `target` collection\n   * — the pick-list for a relation picker (EC-072). References are first-class and\n   * collection-based: the field's schema declares which collection(s) it targets,\n   * and this resolves those rows for ANY target (cross-collection), not just this\n   * source's own collection. The caller passes `field.target`; a multi-target field\n   * (future) merges one call per declared target. An unknown/empty target yields `[]`.\n   */\n  referenceCandidates(collectionId: string): CmsDocument[]\n  /**\n   * The workspace schema a reference/asset can point at — the schema counterpart to\n   * {@link referenceCandidates}. Needed for the cases that read a TARGET collection's\n   * fields (an asset field editing the asset collection's own metadata; the reuse\n   * capability correlating embed manifests against their target collection). A\n   * reference is collection-based, so resolving one sometimes needs the target's\n   * schema, not just its rows.\n   */\n  readonly collections: readonly CollectionDef[]\n  isFieldReadOnly(field: FieldDef): boolean\n  /**\n   * Principal-based field access (EC-240, vision AD-18): `edit` (writable), `read`\n   * (visible but read-only), or `hidden` (not rendered for this principal). This is\n   * IDENTITY-driven and distinct from a field's content-conditional `hidden(values)`\n   * — e.g. an editor's own `role` resolves to `read`, a viewer never SEES a\n   * sensitive field (`hidden`). A single tri-state (never two independent flags) so\n   * the nonsensical writable-but-invisible state can't be expressed. Optional:\n   * absent ⇒ derived from {@link isFieldReadOnly} (`read`|`edit`), i.e. default-open\n   * (permissions RESTRICT, never grant a baseline). Per-rail policy lives on the\n   * source; the starter's policy flows into its construction (engine = mechanism).\n   * Prefer {@link resolveFieldAccess} over calling this directly (it applies the\n   * default-open fallback).\n   */\n  fieldAccess?(field: FieldDef, record?: CmsDocument): FieldAccess\n  validate(doc: CmsDocument): CmsValidationIssue[]\n  /**\n   * Resolve an asset id to its display metadata for a cell/field, or `undefined`\n   * when there is no asset backend (a source without assets degrades to a label\n   * via {@link titleOf}, matching today's \"no AssetsProvider\" behaviour).\n   */\n  resolveAsset?(id: string): ResolvedAsset | undefined\n  /**\n   * How this rail's records are addressed in the EC-155 reference index — the\n   * target shape the delete/unpublish confirmation's inbound pre-flight queries\n   * (EC-433). Absent ⇒ the document shape (`{ type: 'document', id: 'collection:id' }`),\n   * which every `cmsDocuments` collection uses. The assets rail supplies\n   * `{ type: 'asset' }` so its list/bulk delete confirmation enumerates the SAME\n   * inbound references its detail surface does — a document-shaped lookup would\n   * report a referenced asset as \"not referenced\" (the EC-319 objection that\n   * originally kept `remove` off the assets rail).\n   */\n  referenceTarget?(ref: DocumentRef): ReferenceTarget\n  /** The last failed/denied mutation, surfaced by the shell (never a silent failure). */\n  readonly lastError: OperationError | null\n  clearLastError(): void\n  /**\n   * Land any queued/optimistic writes so a subsequent pre-flight READ sees them\n   * (the reference index is maintained on write). A source with no async\n   * persistence omits it — its reads are already authoritative.\n   */\n  flush?(): Promise<void>\n\n  /**\n   * The studio route splat for a record's detail surface (the row link + the\n   * post-create navigation target), e.g. `studioPath.cmsDocument(collectionId, id)`.\n   * Rail-owned so the list never hard-codes the CMS route. `undefined` ⇒ the rail\n   * has no detail surface, so rows render as plain text (no navigation).\n   */\n  detailPath?(id: string): string\n  /**\n   * The studio route splat for this rail's LIST surface — the edit shell's\n   * \"back to list\" breadcrumb crumb and its post-delete navigation target, e.g.\n   * `studioPath.cmsCollection(collectionId)`. Rail-owned so the edit shell never\n   * hard-codes the CMS route (the counterpart to {@link detailPath}). `undefined`\n   * ⇒ the crumb is unlinked and delete falls back to the project index.\n   */\n  readonly listPath?: string\n\n  // --- View state (list) -----------------------------------------------------\n  viewState(): TableViewState\n  setViewState(update: TableViewState | ((prev: TableViewState) => TableViewState)): void\n\n  // --- Writes ----------------------------------------------------------------\n  create(): DocumentRef\n  save(doc: CmsDocument): void\n  remove(ref: DocumentRef): void\n  /**\n   * Bulk publish/unpublish/delete/set-field (only when `capabilities.bulk`): one\n   * command PER item, per-item outcomes enumerated in the report (partial failure\n   * is never silent).\n   */\n  bulk?(ids: readonly string[], action: BulkAction, setField?: BulkSetField): Promise<BulkReport>\n\n  // --- Capability method groups (present iff the matching flag is set) --------\n  /** `publish` — published-pool predicate + publish/unpublish. */\n  readonly publishing?: PublishingCapability\n  /**\n   * Per-document timestamps (EC-445) — the data behind the `$updatedAt`\n   * pseudo-column (and, once its data path lands, `$publishedAt`). Present iff the\n   * source materializes them (the CMS source, sourced through session-hydration);\n   * a rail that carries no timestamps omits it, so those pseudo-columns simply don't\n   * apply (see {@link pseudoColumnsForSource}). The accessor shape mirrors\n   * {@link PublishingCapability.isPublished} — a per-ref lookup, referentially stable.\n   */\n  readonly timestamps?: DocumentTimestampsCapability\n  /** `versions` — version history + restore. */\n  readonly versioning?: VersioningCapability\n  /** `inlineEdit` — the list's single-command optimistic cell write. */\n  readonly inlineEditing?: InlineEditCapability\n  /**\n   * Config-as-code named lenses (EC-246b) the header view selector switches\n   * between. Optional: a source that declares no named views (a non-CMS rail\n   * like users) omits it, and the selector renders nothing (single default).\n   */\n  readonly views?: NamedViewsCapability\n  /**\n   * `importExport` — JSON round-trip of the collection's records. CMS-specific;\n   * a rail whose records are credential-bearing (users) omits it, so neither the\n   * import dialog nor the export action mounts (identities aren't dumped to JSON).\n   */\n  readonly imports?: ImportCapability\n}\n\n/**\n * The capability matrix. Each flag gates a shell region AND the presence of its\n * method group. The **users rail** (EC-240) sets `publish:false`, `versions:false`\n * (credential caution), `create:false` (identity minted by sign-up), and no\n * `liveUrl`/`hierarchy`.\n */\nexport interface CollectionViewCapabilities {\n  readonly publish: boolean\n  readonly versions: boolean\n  readonly locales: boolean\n  readonly inlineEdit: boolean\n  readonly create: boolean\n  /**\n   * Duplicate-document action (EC-442, amended same day). Deliberately its own\n   * flag, never derived from `create`: the owner call (2026-07-17) is CMS\n   * collections ONLY — no primitive rail offers Duplicate for now (identities\n   * and uploads aren't copyable content; redirects deferred until requested as\n   * a product feature).\n   */\n  readonly duplicate: boolean\n  readonly remove: boolean\n  readonly bulk: boolean\n  /** The derived live-URL column (published pool × deployment routes). */\n  readonly liveUrl: boolean\n  /** Parent-self-relation tree mode (hierarchical collections only). */\n  readonly hierarchy: boolean\n  /** JSON import/export of the collection's records (off for credential rails). */\n  readonly importExport: boolean\n  /**\n   * The rail is administration-scoped (mirrors `ADMIN_ONLY_OPERATIONS`). The\n   * nav-permission layer reads this to gate the rail item. Absent ⇒ not admin-only.\n   */\n  readonly adminOnly?: boolean\n}\n\n/**\n * Principal-based field access (EC-240, AD-18). One tri-state drives BOTH visibility\n * and writability: `edit` (writable), `read` (visible, read-only), `hidden` (not\n * rendered). Default `edit` (default-open). Distinct from content-`hidden(values)`;\n * they compose — a field shows iff *not content-hidden AND access ≠ hidden*, and is\n * editable iff *access = edit AND not otherwise read-only* (published view, `form.readOnly`).\n */\nexport type FieldAccess = 'edit' | 'read' | 'hidden'\n\n/**\n * Resolve a field's effective principal access for a source — its {@link\n * CollectionViewSource.fieldAccess} policy when present, else derived from the\n * boolean `isFieldReadOnly` (default-open). The one place the shell asks \"may this\n * principal edit / see this field?\", so the default-open fallback lives in one spot.\n */\nexport function resolveFieldAccess(\n  source: CollectionViewSource,\n  field: FieldDef,\n  record?: CmsDocument,\n): FieldAccess {\n  return source.fieldAccess?.(field, record) ?? (source.isFieldReadOnly(field) ? 'read' : 'edit')\n}\n\n/** Asset display metadata a cell/field renders (thumbnail or labelled badge). */\nexport interface ResolvedAsset {\n  readonly url?: string\n  readonly contentType?: string\n  readonly title?: string\n  readonly filename?: string\n  readonly alt?: string\n}\n\n/** `publish` capability. */\nexport interface PublishingCapability {\n  /** Published-ness from the version pointer (NOT a row field). */\n  isPublished(ref: DocumentRef): boolean\n  publish(ref: DocumentRef): Promise<void>\n  unpublish(ref: DocumentRef): Promise<void>\n  /**\n   * Live URLs for the routable documents, keyed by id — derived from the\n   * PUBLISHED pool (never draft rows) so an unpublished slug/parent edit can't\n   * leak into a live link (EC-205/EC-216). `null` when the collection is not\n   * routable → the live-URL column is hidden. Only present when `capabilities.liveUrl`.\n   */\n  liveUrls?(): Map<string, DocumentUrl> | null\n}\n\n/**\n * `timestamps` capability (EC-445/EC-447): per-document record timestamps as ISO\n * strings, or `undefined` when a document carries none. The `$updatedAt`/`$publishedAt`\n * pseudo-columns read + sort by these. `updatedAt` is the last-write instant;\n * `publishedAt` (EC-447) is the FIRST-publish instant — set-once on publish, cleared on\n * unpublish, so it is `undefined` for a draft / never-published / currently-unpublished\n * document (the column shows EmDash).\n */\nexport interface DocumentTimestampsCapability {\n  updatedAt(ref: DocumentRef): string | undefined\n  publishedAt(ref: DocumentRef): string | undefined\n}\n\n/**\n * The reserved pseudo-columns applicable to a source's list (EC-445), derived from\n * its capabilities: `$updatedAt` iff it materializes timestamps, `$state` iff it has a\n * publish lifecycle, `$url` iff it resolves delivery URLs. The one place the list\n * surface + the Display picker agree on which pseudo-columns exist for a source, so\n * the column universe never drifts between where columns render and where they toggle.\n */\nexport function pseudoColumnsForSource(source: CollectionViewSource): string[] {\n  return pseudoColumns(source.schema, {\n    timestamps: source.timestamps !== undefined,\n    publishing: source.publishing !== undefined,\n    routable: source.capabilities.liveUrl,\n  })\n}\n\n/** `versions` capability. */\nexport interface VersioningCapability {\n  restore(ref: DocumentRef, version: number, scope?: RestoreScope): Promise<CmsDocument | null>\n  /**\n   * The document's recorded version history + live pin. Folds the flush-before-read\n   * ordering INTO the loader (the adapter's concern), so every fetch lists an\n   * authoritative history regardless of which surface triggered the change (EC-224).\n   */\n  load(ref: DocumentRef): Promise<DocumentVersionsView>\n}\n\n/** `inlineEdit` capability: the list's single-command optimistic cell write (EC-168). */\nexport interface InlineEditCapability {\n  commitField(input: CellCommitInput): Promise<CellCommitOutcome>\n}\n\n/** A named lens the header selector offers — id + display name only (the header never needs its state). */\nexport interface NamedView {\n  readonly id: string\n  /** Display name; a {@link LocalizedString} (EC-343), resolved at the render site like `form.label`. */\n  readonly name: LocalizedString\n}\n\n/** `importExport` capability: validate + fold external JSON records into the collection (EC-079). */\nexport interface ImportCapability {\n  importDocuments(items: unknown[]): ImportReport\n}\n\n/**\n * `views` capability: config-as-code named lenses (EC-246b). The header selector\n * only *picks* a lens — it never creates/edits/deletes one (shared views are code).\n */\nexport interface NamedViewsCapability {\n  /** The built-in default + config-declared named views. */\n  list(): readonly NamedView[]\n  /** The currently-selected view id. */\n  activeId(): string\n  /** Switch views (resets the working table state to the view's baseline). */\n  setActive(id: string): void\n}\n\nexport type { CellCommitInput, CellCommitOutcome, ImportReport }\n"]}
+{"version":3,"file":"collection-view-source.js","sourceRoot":"","sources":["../../../src/lib/collection-view/collection-view-source.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAkOvD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA4B,EAC5B,KAAe,EACf,MAAoB;IAEpB,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;AACjG,CAAC;AAiDD;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA4B;IACjE,OAAO,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE;QAClC,UAAU,EAAE,MAAM,CAAC,UAAU,KAAK,SAAS;QAC3C,UAAU,EAAE,MAAM,CAAC,UAAU,KAAK,SAAS;QAC3C,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,OAAO;KACtC,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import type {\n  CmsDocument,\n  CollectionDef,\n  DocumentRef,\n  DocumentUrl,\n  FieldDef,\n  Locale,\n  LocaleConfig,\n  LocalizedString,\n  RestoreScope,\n} from '@elytracms/core/cms-core'\nimport type { CmsValidationIssue } from '@elytracms/core/cms-core'\nimport type { OperationError } from '@elytracms/core/operations'\nimport type { ReferenceTarget } from '@elytracms/core/persistence'\nimport type { TableViewState } from '../cms-views/view-model'\nimport { pseudoColumns } from '../cms-views/view-model'\n// The concrete inline-edit + bulk vocabulary (Stream A relocates it into `lib` as it settles).\nimport type { CellCommitInput, CellCommitOutcome } from '../../components/cms/cell-edit'\nimport type { BulkAction, BulkReport, BulkSetField } from '../../components/cms/bulk-actions'\nimport type { DocumentVersionsView, ImportReport } from '../../components/cms/cms-store'\n\n/**\n * `CollectionViewSource` — the studio's UNIVERSAL interaction seam (EC-240,\n * vision AD-19).\n *\n * The list surface (`CollectionTable`) and the edit-shell (`DetailEditor`) are\n * the studio's universal interaction surfaces. Historically they read the\n * concrete `CmsStore` through `useCms()`, so they only served `cmsDocuments`.\n * This interface is the data-agnostic seam they render over instead, so the SAME\n * surfaces drive the users rail (EC-240), redirects (EC-303), the Components app\n * edit-shell, and any future rail — no hand-rolled UI per rail.\n *\n * **Shape:** the source is scoped to ONE collection (it carries `schema` +\n * `collectionId`), and its methods mirror the subset of `CmsStore` the surfaces\n * actually use — dropping the `collectionId` argument (the source already knows\n * it). Keeping the names/signatures aligned makes the CMS adapter a\n * behaviour-preserving pass-through and the migration near-mechanical.\n *\n * **Referential stability:** the surfaces put `documents`, `isPublished`,\n * `localeConfig`, etc. in `useMemo` dependency arrays. An implementation MUST\n * return stable references across renders (delegate to the underlying store's\n * already-stable methods; never wrap in a fresh closure each render) or memos\n * bust and the inline-edit order snapshot / perf regress.\n *\n * **Capabilities:** flags gate whole shell regions AND method presence — a source\n * with `capabilities.versions === false` (the users rail) never mounts the\n * Versions pane, so no `listVersions` read fires on credential records. Optional\n * method groups are present iff the flag is set.\n */\nexport interface CollectionViewSource {\n  /** The rail/collection this source serves. */\n  readonly collectionId: string\n  /** The schema lens: fields, form tabs/groups, `titleField`, display nouns. */\n  readonly schema: CollectionDef\n  /** Which regions/methods this source supports. */\n  readonly capabilities: CollectionViewCapabilities\n\n  /** The project scope (asset picker, published-pool queries). Absent in fixture sessions. */\n  readonly projectId?: string\n  /**\n   * The collection id assets live in (for a cell/field's `titleOf` label fallback\n   * when {@link resolveAsset} finds no record). Present only for sources that\n   * reference assets — a rail without assets (users) omits it.\n   */\n  readonly assetCollectionId?: string\n  /** The ambient locale lens (only meaningful when `capabilities.locales`). */\n  readonly localeConfig: LocaleConfig\n  readonly activeLocale: Locale\n\n  // --- Reads -----------------------------------------------------------------\n  /** The full row set (view mechanics filter/sort this client-side). */\n  documents(): CmsDocument[]\n  get(ref: DocumentRef): CmsDocument | undefined\n  /** A relation/asset target's display title (hides the string-vs-function `titleField`). */\n  titleOf(ref: DocumentRef): string\n  /**\n   * List the candidate records of a relation field's declared `target` collection\n   * — the pick-list for a relation picker (EC-072). References are first-class and\n   * collection-based: the field's schema declares which collection(s) it targets,\n   * and this resolves those rows for ANY target (cross-collection), not just this\n   * source's own collection. The caller passes `field.target`; a multi-target field\n   * (future) merges one call per declared target. An unknown/empty target yields `[]`.\n   */\n  referenceCandidates(collectionId: string): CmsDocument[]\n  /**\n   * The workspace schema a reference/asset can point at — the schema counterpart to\n   * {@link referenceCandidates}. Needed for the cases that read a TARGET collection's\n   * fields (an asset field editing the asset collection's own metadata; the reuse\n   * capability correlating embed manifests against their target collection). A\n   * reference is collection-based, so resolving one sometimes needs the target's\n   * schema, not just its rows.\n   */\n  readonly collections: readonly CollectionDef[]\n  isFieldReadOnly(field: FieldDef): boolean\n  /**\n   * Principal-based field access (EC-240, vision AD-18): `edit` (writable), `read`\n   * (visible but read-only), or `hidden` (not rendered for this principal). This is\n   * IDENTITY-driven and distinct from a field's content-conditional `hidden(values)`\n   * — e.g. an editor's own `role` resolves to `read`, a viewer never SEES a\n   * sensitive field (`hidden`). A single tri-state (never two independent flags) so\n   * the nonsensical writable-but-invisible state can't be expressed. Optional:\n   * absent ⇒ derived from {@link isFieldReadOnly} (`read`|`edit`), i.e. default-open\n   * (permissions RESTRICT, never grant a baseline). Per-rail policy lives on the\n   * source; the starter's policy flows into its construction (engine = mechanism).\n   * Prefer {@link resolveFieldAccess} over calling this directly (it applies the\n   * default-open fallback).\n   */\n  fieldAccess?(field: FieldDef, record?: CmsDocument): FieldAccess\n  validate(doc: CmsDocument): CmsValidationIssue[]\n  /**\n   * Resolve an asset id to its display metadata for a cell/field, or `undefined`\n   * when there is no asset backend (a source without assets degrades to a label\n   * via {@link titleOf}, matching today's \"no AssetsProvider\" behaviour).\n   */\n  resolveAsset?(id: string): ResolvedAsset | undefined\n  /**\n   * How this rail's records are addressed in the EC-155 reference index — the\n   * target shape the delete/unpublish confirmation's inbound pre-flight queries\n   * (EC-433). Absent ⇒ the document shape (`{ type: 'document', id: 'collection:id' }`),\n   * which every `cmsDocuments` collection uses. The assets rail supplies\n   * `{ type: 'asset' }` so its list/bulk delete confirmation enumerates the SAME\n   * inbound references its detail surface does — a document-shaped lookup would\n   * report a referenced asset as \"not referenced\" (the EC-319 objection that\n   * originally kept `remove` off the assets rail).\n   */\n  referenceTarget?(ref: DocumentRef): ReferenceTarget\n  /** The last failed/denied mutation, surfaced by the shell (never a silent failure). */\n  readonly lastError: OperationError | null\n  clearLastError(): void\n  /**\n   * Land any queued/optimistic writes so a subsequent pre-flight READ sees them\n   * (the reference index is maintained on write). A source with no async\n   * persistence omits it — its reads are already authoritative.\n   */\n  flush?(): Promise<void>\n\n  /**\n   * The studio route splat for a record's detail surface (the row link + the\n   * post-create navigation target), e.g. `studioPath.cmsDocument(collectionId, id)`.\n   * Rail-owned so the list never hard-codes the CMS route. `undefined` ⇒ the rail\n   * has no detail surface, so rows render as plain text (no navigation).\n   */\n  detailPath?(id: string): string\n  /**\n   * The studio route splat for this rail's LIST surface — the edit shell's\n   * \"back to list\" breadcrumb crumb and its post-delete navigation target, e.g.\n   * `studioPath.cmsCollection(collectionId)`. Rail-owned so the edit shell never\n   * hard-codes the CMS route (the counterpart to {@link detailPath}). `undefined`\n   * ⇒ the crumb is unlinked and delete falls back to the project index.\n   */\n  readonly listPath?: string\n\n  // --- View state (list) -----------------------------------------------------\n  viewState(): TableViewState\n  setViewState(update: TableViewState | ((prev: TableViewState) => TableViewState)): void\n\n  // --- Writes ----------------------------------------------------------------\n  create(): DocumentRef\n  save(doc: CmsDocument): void\n  remove(ref: DocumentRef): void\n  /**\n   * Bulk publish/unpublish/delete/set-field (only when `capabilities.bulk`): one\n   * command PER item, per-item outcomes enumerated in the report (partial failure\n   * is never silent).\n   */\n  bulk?(ids: readonly string[], action: BulkAction, setField?: BulkSetField): Promise<BulkReport>\n\n  // --- Capability method groups (present iff the matching flag is set) --------\n  /** `publish` — published-pool predicate + publish/unpublish. */\n  readonly publishing?: PublishingCapability\n  /**\n   * Per-document timestamps (EC-445) — the data behind the `$updatedAt`\n   * pseudo-column (and, once its data path lands, `$publishedAt`). Present iff the\n   * source materializes them (the CMS source, sourced through session-hydration);\n   * a rail that carries no timestamps omits it, so those pseudo-columns simply don't\n   * apply (see {@link pseudoColumnsForSource}). The accessor shape mirrors\n   * {@link PublishingCapability.isPublished} — a per-ref lookup, referentially stable.\n   */\n  readonly timestamps?: DocumentTimestampsCapability\n  /** `versions` — version history + restore. */\n  readonly versioning?: VersioningCapability\n  /** `inlineEdit` — the list's single-command optimistic cell write. */\n  readonly inlineEditing?: InlineEditCapability\n  /**\n   * Config-as-code named lenses (EC-246b) the header view selector switches\n   * between. Optional: a source that declares no named views (a non-CMS rail\n   * like users) omits it, and the selector renders nothing (single default).\n   */\n  readonly views?: NamedViewsCapability\n  /**\n   * `importExport` — JSON round-trip of the collection's records. CMS-specific;\n   * a rail whose records are credential-bearing (users) omits it, so neither the\n   * import dialog nor the export action mounts (identities aren't dumped to JSON).\n   */\n  readonly imports?: ImportCapability\n}\n\n/**\n * The capability matrix. Each flag gates a shell region AND the presence of its\n * method group. The **users rail** (EC-240) sets `publish:false`, `versions:false`\n * (credential caution), `create:false` (identity minted by sign-up), and no\n * `liveUrl`/`hierarchy`.\n */\nexport interface CollectionViewCapabilities {\n  readonly publish: boolean\n  readonly versions: boolean\n  readonly locales: boolean\n  readonly inlineEdit: boolean\n  readonly create: boolean\n  /**\n   * Duplicate-document action (EC-442, amended same day). Deliberately its own\n   * flag, never derived from `create`: the owner call (2026-07-17) is CMS\n   * collections ONLY — no primitive rail offers Duplicate for now (identities\n   * and uploads aren't copyable content; redirects deferred until requested as\n   * a product feature).\n   */\n  readonly duplicate: boolean\n  readonly remove: boolean\n  readonly bulk: boolean\n  /** The derived live-URL column (published pool × deployment routes). */\n  readonly liveUrl: boolean\n  /** Parent-self-relation tree mode (hierarchical collections only). */\n  readonly hierarchy: boolean\n  /** JSON import/export of the collection's records (off for credential rails). */\n  readonly importExport: boolean\n  /**\n   * The rail is administration-scoped (mirrors `ADMIN_ONLY_OPERATIONS`). The\n   * nav-permission layer reads this to gate the rail item. Absent ⇒ not admin-only.\n   */\n  readonly adminOnly?: boolean\n}\n\n/**\n * Principal-based field access (EC-240, AD-18). One tri-state drives BOTH visibility\n * and writability: `edit` (writable), `read` (visible, read-only), `hidden` (not\n * rendered). Default `edit` (default-open). Distinct from content-`hidden(values)`;\n * they compose — a field shows iff *not content-hidden AND access ≠ hidden*, and is\n * editable iff *access = edit AND not otherwise read-only* (published view, `form.readOnly`).\n */\nexport type FieldAccess = 'edit' | 'read' | 'hidden'\n\n/**\n * Resolve a field's effective principal access for a source — its {@link\n * CollectionViewSource.fieldAccess} policy when present, else derived from the\n * boolean `isFieldReadOnly` (default-open). The one place the shell asks \"may this\n * principal edit / see this field?\", so the default-open fallback lives in one spot.\n */\nexport function resolveFieldAccess(\n  source: CollectionViewSource,\n  field: FieldDef,\n  record?: CmsDocument,\n): FieldAccess {\n  return source.fieldAccess?.(field, record) ?? (source.isFieldReadOnly(field) ? 'read' : 'edit')\n}\n\n/** Asset display metadata a cell/field renders (thumbnail or labelled badge). */\nexport interface ResolvedAsset {\n  readonly url?: string\n  readonly contentType?: string\n  readonly title?: string\n  readonly filename?: string\n  readonly alt?: string\n}\n\n/** `publish` capability. */\nexport interface PublishingCapability {\n  /** Published-ness from the version pointer (NOT a row field). */\n  isPublished(ref: DocumentRef): boolean\n  /**\n   * Does this PUBLISHED document's working draft carry unpublished changes\n   * (EC-449)? The cheap per-row signal behind the amber \"changed\" `$state` dot —\n   * sourced from the MATERIALIZED `hasUnpublishedChanges` record flag (computed\n   * once at the write chokepoint), never a per-row snapshot compare. Optional: a\n   * source without the signal omits it, and the list derives only\n   * published/draft (exactly the pre-EC-449 rendering). Same referentially-stable\n   * per-ref accessor shape as {@link isPublished}.\n   */\n  hasUnpublishedChanges?(ref: DocumentRef): boolean\n  publish(ref: DocumentRef): Promise<void>\n  unpublish(ref: DocumentRef): Promise<void>\n  /**\n   * Live URLs for the routable documents, keyed by id — derived from the\n   * PUBLISHED pool (never draft rows) so an unpublished slug/parent edit can't\n   * leak into a live link (EC-205/EC-216). `null` when the collection is not\n   * routable → the live-URL column is hidden. Only present when `capabilities.liveUrl`.\n   */\n  liveUrls?(): Map<string, DocumentUrl> | null\n}\n\n/**\n * `timestamps` capability (EC-445/EC-447): per-document record timestamps as ISO\n * strings, or `undefined` when a document carries none. The `$updatedAt`/`$publishedAt`\n * pseudo-columns read + sort by these. `updatedAt` is the last-write instant;\n * `publishedAt` (EC-447) is the FIRST-publish instant — set-once on publish, cleared on\n * unpublish, so it is `undefined` for a draft / never-published / currently-unpublished\n * document (the column shows EmDash).\n */\nexport interface DocumentTimestampsCapability {\n  updatedAt(ref: DocumentRef): string | undefined\n  publishedAt(ref: DocumentRef): string | undefined\n}\n\n/**\n * The reserved pseudo-columns applicable to a source's list (EC-445), derived from\n * its capabilities: `$updatedAt` iff it materializes timestamps, `$state` iff it has a\n * publish lifecycle, `$url` iff it resolves delivery URLs. The one place the list\n * surface + the Display picker agree on which pseudo-columns exist for a source, so\n * the column universe never drifts between where columns render and where they toggle.\n */\nexport function pseudoColumnsForSource(source: CollectionViewSource): string[] {\n  return pseudoColumns(source.schema, {\n    timestamps: source.timestamps !== undefined,\n    publishing: source.publishing !== undefined,\n    routable: source.capabilities.liveUrl,\n  })\n}\n\n/** `versions` capability. */\nexport interface VersioningCapability {\n  restore(ref: DocumentRef, version: number, scope?: RestoreScope): Promise<CmsDocument | null>\n  /**\n   * The document's recorded version history + live pin. Folds the flush-before-read\n   * ordering INTO the loader (the adapter's concern), so every fetch lists an\n   * authoritative history regardless of which surface triggered the change (EC-224).\n   */\n  load(ref: DocumentRef): Promise<DocumentVersionsView>\n}\n\n/** `inlineEdit` capability: the list's single-command optimistic cell write (EC-168). */\nexport interface InlineEditCapability {\n  commitField(input: CellCommitInput): Promise<CellCommitOutcome>\n}\n\n/** A named lens the header selector offers — id + display name only (the header never needs its state). */\nexport interface NamedView {\n  readonly id: string\n  /** Display name; a {@link LocalizedString} (EC-343), resolved at the render site like `form.label`. */\n  readonly name: LocalizedString\n}\n\n/** `importExport` capability: validate + fold external JSON records into the collection (EC-079). */\nexport interface ImportCapability {\n  importDocuments(items: unknown[]): ImportReport\n}\n\n/**\n * `views` capability: config-as-code named lenses (EC-246b). The header selector\n * only *picks* a lens — it never creates/edits/deletes one (shared views are code).\n */\nexport interface NamedViewsCapability {\n  /** The built-in default + config-declared named views. */\n  list(): readonly NamedView[]\n  /** The currently-selected view id. */\n  activeId(): string\n  /** Switch views (resets the working table state to the view's baseline). */\n  setActive(id: string): void\n}\n\nexport type { CellCommitInput, CellCommitOutcome, ImportReport }\n"]}

package/dist/lib/operations/cms-persistence.d.ts

@@ -1,4 +1,5 @@
 import type { CmsDocument, CollectionDef, DocumentRef, PropFieldLookup } from '@elytracms/core/cms-core';
+import type { CmsDocumentRecord } from '@elytracms/core/persistence';
 import type { OperationError, OperationsClient } from './operations-package.js';
 /**
  * CMS session → operations persistence (EC-141). The CMS store keeps documents
@@ -38,5 +39,12 @@ export interface CmsPersisterOptions {
      */
     lookupManifest?: PropFieldLookup;
     onError: (error: OperationError) => void;
+    /**
+     * Called with the AUTHORITATIVE saved record after each queued upsert lands
+     * (EC-449). The session adopts server-computed record state from it — today the
+     * write-chokepoint `hasUnpublishedChanges` verdict behind the amber "changed"
+     * list dot. Optional: omitting it changes nothing.
+     */
+    onDocumentSaved?: (record: CmsDocumentRecord) => void;
 }
 export declare function createCmsPersister(options: CmsPersisterOptions): CmsPersister;

package/dist/lib/operations/cms-persistence.js

@@ -63,7 +63,15 @@ export function createCmsPersister(options) {
     return {
         upsertDocument(doc) {
             const document = selfType(doc);
-            command((operations) => operations.documents.upsert({ projectId: options.projectId, document }));
+            command(async (operations) => {
+                const result = await operations.documents.upsert({ projectId: options.projectId, document });
+                // EC-449: hand the authoritative saved record back to the session so it
+                // adopts the server-computed `hasUnpublishedChanges` verdict (the queue
+                // swallows successful results otherwise).
+                if (result.ok)
+                    options.onDocumentSaved?.(result.value);
+                return result;
+            });
         },
         deleteDocument(ref) {
             command((operations) => operations.documents.delete({ projectId: options.projectId, ref }));

package/dist/lib/operations/cms-persistence.js.map

@@ -1 +1 @@
-{"version":3,"file":"cms-persistence.js","sourceRoot":"","sources":["../../../src/lib/operations/cms-persistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAQ3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AA2CpD,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAA;IAClC,IAAI,YAAY,GAAG,KAAK,CAAA;IAExB;;;;;OAKG;IACH,SAAS,QAAQ,CAAC,GAAgB;QAChC,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,UAAU,CAAC,CAAA;QAChF,IAAI,CAAC,UAAU;YAAE,OAAO,GAAG,CAAA;QAC3B,OAAO,gBAAgB,CACrB,GAAG,EACH,UAAU,EACV,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CACzE,CAAA;IACH,CAAC;IAED,KAAK,UAAU,iBAAiB;QAC9B,IAAI,YAAY;YAAE,OAAO,IAAI,CAAA;QAC7B,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,CAAA;QAChD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;QAC5E,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,iEAAiE;YACjE,qEAAqE;YACrE,sBAAsB;YACtB,YAAY,GAAG,IAAI,CAAA;YACnB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;YACzC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,CAAC,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;SAC3C,CAAC,CAAA;QACF,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YAC5B,OAAO,KAAK,CAAA;QACd,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC;gBAC/C,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC;aAC7B,CAAC,CAAA;YACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBAC7B,OAAO,KAAK,CAAA;YACd,CAAC;QACH,CAAC;QACD,YAAY,GAAG,IAAI,CAAA;QACnB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,SAAS,OAAO,CAAC,GAAwE;QACvF,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YACpB,mEAAmE;YACnE,wEAAwE;YACxE,IAAI,CAAC,CAAC,MAAM,iBAAiB,EAAE,CAAC;gBAAE,OAAM;YACxC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,CAAA;YAChD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,CAAA;YACpC,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC/C,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO;QACL,cAAc,CAAC,GAAG;YAChB,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;YAC9B,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CACrB,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CACxE,CAAA;QACH,CAAC;QACD,cAAc,CAAC,GAAG;YAChB,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;QAC7F,CAAC;QACD,eAAe,CAAC,GAAG;YACjB,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CACrB,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CACpE,CAAA;QACH,CAAC;QACD,iBAAiB,CAAC,GAAG;YACnB,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CACrB,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CACtE,CAAA;QACH,CAAC;QACD,gBAAgB,CAAC,UAAU;YACzB,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CACrB,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,CACjF,CAAA;QACH,CAAC;QACD,KAAK,CAAC,cAAc;YAClB,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBACpB,MAAM,iBAAiB,EAAE,CAAA;YAC3B,CAAC,CAAC,CAAA;YACF,MAAM,KAAK,CAAC,KAAK,EAAE,CAAA;QACrB,CAAC;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE;KAC3B,CAAA;AACH,CAAC","sourcesContent":["import { selfTypeDocument } from '@elytracms/core/cms-core'\nimport type {\n  CmsDocument,\n  CollectionDef,\n  DocumentRef,\n  PropFieldLookup,\n} from '@elytracms/core/cms-core'\nimport type { OperationError, OperationResult, OperationsClient } from './operations-package'\nimport { createPersistQueue } from './persist-queue'\n\n/**\n * CMS session → operations persistence (EC-141). The CMS store keeps documents\n * and collections as optimistic session state (synchronous editing, validation\n * feedback while typing); every mutation is mirrored onto the operations layer\n * through `documents.*` / `schema.*` commands in dispatch order.\n *\n * Baseline: the persisted seed only covers the sample project. Before the\n * first mirrored command, the persister ensures the project has a persisted\n * schema + documents matching the session's starting state (kit imports,\n * sample fixtures), so deletes/updates address records that exist.\n */\nexport interface CmsPersister {\n  upsertDocument(doc: CmsDocument): void\n  deleteDocument(ref: DocumentRef): void\n  /** Publish (EC-224): snapshot the current draft as a new version and pin it live. */\n  publishDocument(ref: DocumentRef): void\n  /** Unpublish (EC-224): clear the live version pin + any legacy published marker. */\n  unpublishDocument(ref: DocumentRef): void\n  upsertCollection(collection: CollectionDef): void\n  /** Run the baseline seed now (e.g. before applying an AI changeset). */\n  ensureBaseline(): Promise<void>\n  /** Await every queued command. */\n  flush(): Promise<void>\n}\n\nexport interface CmsPersisterOptions {\n  projectId: string\n  getOperations: () => Promise<OperationsClient>\n  /** Session collections/documents at baseline time (read lazily via refs). */\n  getCollections: () => readonly CollectionDef[]\n  getDocuments: () => readonly CmsDocument[]\n  /**\n   * Component-prop field-defs by component id (EC-277): the manifest half of the\n   * write-time self-typing lens, so a composition's static relation/asset props are\n   * self-typed too (\"schema leads, component adopts\"). Omit → document fields are\n   * still self-typed; composition static props pass through.\n   */\n  lookupManifest?: PropFieldLookup\n  onError: (error: OperationError) => void\n}\n\nexport function createCmsPersister(options: CmsPersisterOptions): CmsPersister {\n  const queue = createPersistQueue()\n  let baselineDone = false\n\n  /**\n   * EC-277: self-type a document through the schema-as-lens (+ the manifest for\n   * composition static props) before it is persisted — the single write-time\n   * wrapping point, so everything at rest self-describes and derivation stays\n   * schema-free. Drift-tolerant: an undeclared collection passes through unchanged.\n   */\n  function selfType(doc: CmsDocument): CmsDocument {\n    const collection = options.getCollections().find((c) => c.id === doc.collection)\n    if (!collection) return doc\n    return selfTypeDocument(\n      doc,\n      collection,\n      options.lookupManifest ? { lookupManifest: options.lookupManifest } : {},\n    )\n  }\n\n  async function ensureBaselineNow(): Promise<boolean> {\n    if (baselineDone) return true\n    const operations = await options.getOperations()\n    const schema = await operations.schema.get({ projectId: options.projectId })\n    if (schema.ok) {\n      // A persisted schema exists (seeded sample project or an earlier\n      // session) — the session started from the same fixtures, so commands\n      // can apply directly.\n      baselineDone = true\n      return true\n    }\n    const saved = await operations.schema.save({\n      projectId: options.projectId,\n      collections: [...options.getCollections()],\n    })\n    if (!saved.ok) {\n      options.onError(saved.error)\n      return false\n    }\n    for (const document of options.getDocuments()) {\n      const result = await operations.documents.upsert({\n        projectId: options.projectId,\n        document: selfType(document),\n      })\n      if (!result.ok) {\n        options.onError(result.error)\n        return false\n      }\n    }\n    baselineDone = true\n    return true\n  }\n\n  function command(run: (operations: OperationsClient) => Promise<OperationResult<unknown>>): void {\n    queue.push(async () => {\n      // A failed baseline already surfaced through onError — running the\n      // command against missing records would only add a confusing follow-up.\n      if (!(await ensureBaselineNow())) return\n      const operations = await options.getOperations()\n      const result = await run(operations)\n      if (!result.ok) options.onError(result.error)\n    })\n  }\n\n  return {\n    upsertDocument(doc) {\n      const document = selfType(doc)\n      command((operations) =>\n        operations.documents.upsert({ projectId: options.projectId, document }),\n      )\n    },\n    deleteDocument(ref) {\n      command((operations) => operations.documents.delete({ projectId: options.projectId, ref }))\n    },\n    publishDocument(ref) {\n      command((operations) =>\n        operations.documents.publish({ projectId: options.projectId, ref }),\n      )\n    },\n    unpublishDocument(ref) {\n      command((operations) =>\n        operations.documents.unpublish({ projectId: options.projectId, ref }),\n      )\n    },\n    upsertCollection(collection) {\n      command((operations) =>\n        operations.schema.upsertCollection({ projectId: options.projectId, collection }),\n      )\n    },\n    async ensureBaseline() {\n      queue.push(async () => {\n        await ensureBaselineNow()\n      })\n      await queue.flush()\n    },\n    flush: () => queue.flush(),\n  }\n}\n"]}
+{"version":3,"file":"cms-persistence.js","sourceRoot":"","sources":["../../../src/lib/operations/cms-persistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAS3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAkDpD,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAA;IAClC,IAAI,YAAY,GAAG,KAAK,CAAA;IAExB;;;;;OAKG;IACH,SAAS,QAAQ,CAAC,GAAgB;QAChC,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,UAAU,CAAC,CAAA;QAChF,IAAI,CAAC,UAAU;YAAE,OAAO,GAAG,CAAA;QAC3B,OAAO,gBAAgB,CACrB,GAAG,EACH,UAAU,EACV,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CACzE,CAAA;IACH,CAAC;IAED,KAAK,UAAU,iBAAiB;QAC9B,IAAI,YAAY;YAAE,OAAO,IAAI,CAAA;QAC7B,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,CAAA;QAChD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;QAC5E,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,iEAAiE;YACjE,qEAAqE;YACrE,sBAAsB;YACtB,YAAY,GAAG,IAAI,CAAA;YACnB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;YACzC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,CAAC,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;SAC3C,CAAC,CAAA;QACF,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YAC5B,OAAO,KAAK,CAAA;QACd,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC;gBAC/C,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC;aAC7B,CAAC,CAAA;YACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBAC7B,OAAO,KAAK,CAAA;YACd,CAAC;QACH,CAAC;QACD,YAAY,GAAG,IAAI,CAAA;QACnB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,SAAS,OAAO,CAAC,GAAwE;QACvF,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YACpB,mEAAmE;YACnE,wEAAwE;YACxE,IAAI,CAAC,CAAC,MAAM,iBAAiB,EAAE,CAAC;gBAAE,OAAM;YACxC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,CAAA;YAChD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,CAAA;YACpC,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC/C,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO;QACL,cAAc,CAAC,GAAG;YAChB,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;YAC9B,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;gBAC3B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAA;gBAC5F,wEAAwE;gBACxE,wEAAwE;gBACxE,0CAA0C;gBAC1C,IAAI,MAAM,CAAC,EAAE;oBAAE,OAAO,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBACtD,OAAO,MAAM,CAAA;YACf,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,cAAc,CAAC,GAAG;YAChB,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;QAC7F,CAAC;QACD,eAAe,CAAC,GAAG;YACjB,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CACrB,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CACpE,CAAA;QACH,CAAC;QACD,iBAAiB,CAAC,GAAG;YACnB,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CACrB,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CACtE,CAAA;QACH,CAAC;QACD,gBAAgB,CAAC,UAAU;YACzB,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CACrB,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,CACjF,CAAA;QACH,CAAC;QACD,KAAK,CAAC,cAAc;YAClB,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBACpB,MAAM,iBAAiB,EAAE,CAAA;YAC3B,CAAC,CAAC,CAAA;YACF,MAAM,KAAK,CAAC,KAAK,EAAE,CAAA;QACrB,CAAC;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE;KAC3B,CAAA;AACH,CAAC","sourcesContent":["import { selfTypeDocument } from '@elytracms/core/cms-core'\nimport type {\n  CmsDocument,\n  CollectionDef,\n  DocumentRef,\n  PropFieldLookup,\n} from '@elytracms/core/cms-core'\nimport type { CmsDocumentRecord } from '@elytracms/core/persistence'\nimport type { OperationError, OperationResult, OperationsClient } from './operations-package'\nimport { createPersistQueue } from './persist-queue'\n\n/**\n * CMS session → operations persistence (EC-141). The CMS store keeps documents\n * and collections as optimistic session state (synchronous editing, validation\n * feedback while typing); every mutation is mirrored onto the operations layer\n * through `documents.*` / `schema.*` commands in dispatch order.\n *\n * Baseline: the persisted seed only covers the sample project. Before the\n * first mirrored command, the persister ensures the project has a persisted\n * schema + documents matching the session's starting state (kit imports,\n * sample fixtures), so deletes/updates address records that exist.\n */\nexport interface CmsPersister {\n  upsertDocument(doc: CmsDocument): void\n  deleteDocument(ref: DocumentRef): void\n  /** Publish (EC-224): snapshot the current draft as a new version and pin it live. */\n  publishDocument(ref: DocumentRef): void\n  /** Unpublish (EC-224): clear the live version pin + any legacy published marker. */\n  unpublishDocument(ref: DocumentRef): void\n  upsertCollection(collection: CollectionDef): void\n  /** Run the baseline seed now (e.g. before applying an AI changeset). */\n  ensureBaseline(): Promise<void>\n  /** Await every queued command. */\n  flush(): Promise<void>\n}\n\nexport interface CmsPersisterOptions {\n  projectId: string\n  getOperations: () => Promise<OperationsClient>\n  /** Session collections/documents at baseline time (read lazily via refs). */\n  getCollections: () => readonly CollectionDef[]\n  getDocuments: () => readonly CmsDocument[]\n  /**\n   * Component-prop field-defs by component id (EC-277): the manifest half of the\n   * write-time self-typing lens, so a composition's static relation/asset props are\n   * self-typed too (\"schema leads, component adopts\"). Omit → document fields are\n   * still self-typed; composition static props pass through.\n   */\n  lookupManifest?: PropFieldLookup\n  onError: (error: OperationError) => void\n  /**\n   * Called with the AUTHORITATIVE saved record after each queued upsert lands\n   * (EC-449). The session adopts server-computed record state from it — today the\n   * write-chokepoint `hasUnpublishedChanges` verdict behind the amber \"changed\"\n   * list dot. Optional: omitting it changes nothing.\n   */\n  onDocumentSaved?: (record: CmsDocumentRecord) => void\n}\n\nexport function createCmsPersister(options: CmsPersisterOptions): CmsPersister {\n  const queue = createPersistQueue()\n  let baselineDone = false\n\n  /**\n   * EC-277: self-type a document through the schema-as-lens (+ the manifest for\n   * composition static props) before it is persisted — the single write-time\n   * wrapping point, so everything at rest self-describes and derivation stays\n   * schema-free. Drift-tolerant: an undeclared collection passes through unchanged.\n   */\n  function selfType(doc: CmsDocument): CmsDocument {\n    const collection = options.getCollections().find((c) => c.id === doc.collection)\n    if (!collection) return doc\n    return selfTypeDocument(\n      doc,\n      collection,\n      options.lookupManifest ? { lookupManifest: options.lookupManifest } : {},\n    )\n  }\n\n  async function ensureBaselineNow(): Promise<boolean> {\n    if (baselineDone) return true\n    const operations = await options.getOperations()\n    const schema = await operations.schema.get({ projectId: options.projectId })\n    if (schema.ok) {\n      // A persisted schema exists (seeded sample project or an earlier\n      // session) — the session started from the same fixtures, so commands\n      // can apply directly.\n      baselineDone = true\n      return true\n    }\n    const saved = await operations.schema.save({\n      projectId: options.projectId,\n      collections: [...options.getCollections()],\n    })\n    if (!saved.ok) {\n      options.onError(saved.error)\n      return false\n    }\n    for (const document of options.getDocuments()) {\n      const result = await operations.documents.upsert({\n        projectId: options.projectId,\n        document: selfType(document),\n      })\n      if (!result.ok) {\n        options.onError(result.error)\n        return false\n      }\n    }\n    baselineDone = true\n    return true\n  }\n\n  function command(run: (operations: OperationsClient) => Promise<OperationResult<unknown>>): void {\n    queue.push(async () => {\n      // A failed baseline already surfaced through onError — running the\n      // command against missing records would only add a confusing follow-up.\n      if (!(await ensureBaselineNow())) return\n      const operations = await options.getOperations()\n      const result = await run(operations)\n      if (!result.ok) options.onError(result.error)\n    })\n  }\n\n  return {\n    upsertDocument(doc) {\n      const document = selfType(doc)\n      command(async (operations) => {\n        const result = await operations.documents.upsert({ projectId: options.projectId, document })\n        // EC-449: hand the authoritative saved record back to the session so it\n        // adopts the server-computed `hasUnpublishedChanges` verdict (the queue\n        // swallows successful results otherwise).\n        if (result.ok) options.onDocumentSaved?.(result.value)\n        return result\n      })\n    },\n    deleteDocument(ref) {\n      command((operations) => operations.documents.delete({ projectId: options.projectId, ref }))\n    },\n    publishDocument(ref) {\n      command((operations) =>\n        operations.documents.publish({ projectId: options.projectId, ref }),\n      )\n    },\n    unpublishDocument(ref) {\n      command((operations) =>\n        operations.documents.unpublish({ projectId: options.projectId, ref }),\n      )\n    },\n    upsertCollection(collection) {\n      command((operations) =>\n        operations.schema.upsertCollection({ projectId: options.projectId, collection }),\n      )\n    },\n    async ensureBaseline() {\n      queue.push(async () => {\n        await ensureBaselineNow()\n      })\n      await queue.flush()\n    },\n    flush: () => queue.flush(),\n  }\n}\n"]}

package/dist/lib/operations/session-hydration.d.ts

@@ -70,6 +70,17 @@ export interface HydratedCms {
      * fixtures/callers stay valid; `loadHydratedCms` always sets it.
      */
     publishTimestamps?: Record<string, string>;
+    /**
+     * Document keys whose working draft carries UNPUBLISHED CHANGES (EC-449) — the
+     * persisted `cmsDocuments.hasUnpublishedChanges === true` set, keyed like
+     * {@link publishedKeys}. Backs the amber "changed" state of the `$state` list
+     * dot; the session seeds its changed-set from this and re-stamps it
+     * authoritatively on save/publish/unpublish from the returned records. Only
+     * `true` flags contribute — an absent entry means "no unpublished changes"
+     * (`false` or not yet materialized both render the same dot). Optional so
+     * pre-EC-449 fixtures/callers stay valid; `loadHydratedCms` always sets it.
+     */
+    changedKeys?: string[];
     /**
      * The project's asset records (the `assets` table — NOT cms `asset`-collection
      * documents). The preview content engine wires these into its lookup so listing/

package/dist/lib/operations/session-hydration.js

@@ -92,6 +92,12 @@ export async function loadHydratedCms(operations, projectId) {
             publishTimestamps: Object.fromEntries(contentRecords
                 .filter((record) => record.publishedAt !== undefined)
                 .map((record) => [documentKey(record.document), record.publishedAt])),
+            // EC-449: the documents whose draft carries unpublished changes (the amber
+            // list dot) — only materialized `true` flags contribute (absent/false both
+            // mean "not changed"; the flag only exists on published docs).
+            changedKeys: contentRecords
+                .filter((record) => record.hasUnpublishedChanges === true)
+                .map((record) => documentKey(record.document)),
             assets: assets.ok ? assets.value : [],
         },
     };

package/dist/lib/operations/session-hydration.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-hydration.js","sourceRoot":"","sources":["../../../src/lib/operations/session-hydration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AAGtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAG/D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,iBAAiB,CAAA;AAEjD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAwB,IAAI,GAAG,CAAC;IACvE,uBAAuB;IACvB,gBAAgB;CACjB,CAAC,CAAA;AAgDF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,UAA4B,EAC5B,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IACzD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAA;IAC/E,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CACjD,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,4BAA4B,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CACjE,CAAA;IACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IAC9D,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAChE,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAA;IACnC,+EAA+E;IAC/E,oFAAoF;IACpF,gFAAgF;IAChF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1E,MAAM,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACvD,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAC3C,CAAA;IACD,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,iBAAiB,GAAG,CAAC,MAAuC,EAAE,EAAE,CACpE,MAAM,CAAC,gBAAgB,KAAK,SAAS,CAAA;IACvC,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,WAAW;YACX,0EAA0E;YAC1E,2EAA2E;YAC3E,yEAAyE;YACzE,yEAAyE;YACzE,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC1D,aAAa,EAAE,cAAc;iBAC1B,MAAM,CAAC,iBAAiB,CAAC;iBACzB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChD,8EAA8E;YAC9E,2EAA2E;YAC3E,UAAU,EAAE,MAAM,CAAC,WAAW,CAC5B,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CACjF;YACD,2EAA2E;YAC3E,0EAA0E;YAC1E,yEAAyE;YACzE,iBAAiB,EAAE,MAAM,CAAC,WAAW,CACnC,cAAc;iBACX,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC;iBACpD,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,WAAqB,CAAC,CAAC,CACjF;YACD,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;SACtC;KACF,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAA4B,EAC5B,SAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IACxD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAA;IACvB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,CAAA;AAChD,CAAC","sourcesContent":["import { documentKey } from '@elytracms/core/cms-core'\nimport type { CmsDocument, CollectionDef } from '@elytracms/core/cms-core'\nimport type { AssetRecord } from '@elytracms/core/persistence'\nimport { DATA_SOURCES_COLLECTION } from '../data/sources-store'\nimport type { OperationResult, OperationsClient } from './operations-package'\n\n/**\n * Legacy marker (EC-246b): editor-owned saved views are retired — list\n * presentation is config-as-code now (named views live in `cms/`). The id is kept\n * only so hydration keeps excluding any `cms-saved-views` documents a pre-EC-246b\n * deployment persisted, so they never surface as content.\n */\nexport const VIEWS_COLLECTION = 'cms-saved-views'\n\n/**\n * Persisted-session hydration (Milestone B sign-off fix, EC-177 gap 1).\n *\n * Against a persistent backend (Convex mode) a studio session must BOOT from\n * what is persisted — the saved CMS schema + documents (+ asset records) — and\n * fall back to the deterministic fixtures only when the project has nothing\n * persisted yet (first run). Before this, every session seeded from fixtures,\n * so reloads hid the editor's work.\n *\n * EC-287: the DB-resident project graph and its publish path are retired —\n * layouts/config/schema/components are CODE, the DB holds content only. A\n * session no longer hydrates a graph revision or graph-publishing state; CMS\n * content (with per-document `publishedVersion`, EC-224) is the only persisted\n * surface a session boots from.\n *\n * This module is the pure load half: read-only `@elytracms/core/operations` queries\n * composed into one hydration result. `not-found` is a *normal* answer (the\n * first-run fallback); every other failure propagates as the structured\n * operation error so the gate renders it — never a silent fixture fallback.\n * The React gate that applies it lives in\n * `components/studio/project-session.tsx`. EC-361: the playground calls the\n * SAME loader (over the seeded in-memory adapter, through operations — AD-17)\n * to hydrate the canvas/preview content session; only the render-gating is\n * Convex-specific.\n */\n\n/**\n * Collections owned by studio subsystems (data sources, saved views). They live\n * in the same persisted schema but are NOT content: the CMS session, the\n * sidebar, and the content preview engine must never offer them as authorable\n * collections. Routes/redirects are NO LONGER system collections (EC-207): they\n * are config-sourced and never persisted to the backend.\n */\nexport const STUDIO_SYSTEM_COLLECTION_IDS: ReadonlySet<string> = new Set([\n  DATA_SOURCES_COLLECTION,\n  VIEWS_COLLECTION,\n])\n\n/** The persisted CMS content of a project: schema + documents, system collections excluded. */\nexport interface HydratedCms {\n  collections: CollectionDef[]\n  documents: CmsDocument[]\n  /**\n   * Published document keys (EC-224), via the version pointer: a record is\n   * published iff `publishedVersion` is set. The session boots its\n   * `publishedKeys` from this — published-ness is the pointer, nothing else.\n   */\n  publishedKeys: string[]\n  /**\n   * Per-document last-write timestamps (EC-445), keyed by `documentKey`\n   * (`collection:id`) → the persisted `cmsDocuments.updatedAt` ISO string. Backs the\n   * `$updatedAt` list column; the session seeds its `documentUpdatedAt` map from this.\n   * Optional so pre-EC-445 fixtures/callers stay valid (the session falls back to a\n   * session-start stamp for the seeded documents); `loadHydratedCms` always sets it.\n   */\n  timestamps?: Record<string, string>\n  /**\n   * Per-document FIRST-publish instants (EC-447), keyed by `documentKey`\n   * (`collection:id`) → the persisted `cmsDocuments.publishedAt` ISO string. Present\n   * only for documents that carry one (currently published, with a recorded publish\n   * instant); the session seeds its `documentPublishedAt` map from this. Backs the\n   * `$publishedAt` list column. UNLIKE {@link timestamps} there is no session-start\n   * fallback — an absent entry is a real \"no publish date\" (EmDash), and the store\n   * re-stamps/clears it authoritatively on publish/unpublish. Optional so pre-EC-447\n   * fixtures/callers stay valid; `loadHydratedCms` always sets it.\n   */\n  publishTimestamps?: Record<string, string>\n  /**\n   * The project's asset records (the `assets` table — NOT cms `asset`-collection\n   * documents). The preview content engine wires these into its lookup so listing/\n   * relation results resolve their `asset`-typed FIELDS (e.g. a ProductGrid product's\n   * `gallery`) to delivery shape — matching what the renderer's `resolveAsset` already\n   * does for static `asset` props (EC-262). Without them, the studio canvas renders\n   * such nested images blank even though the documents reference real assets.\n   */\n  assets: AssetRecord[]\n}\n\n/** Everything a Convex-mode session boots from. `null` fields mean \"nothing persisted\" (first run). */\nexport interface HydratedProjectSession {\n  /** Persisted CMS schema + documents, or `null` when no content schema was ever saved. */\n  cms: HydratedCms | null\n}\n\n/**\n * Load the persisted CMS content state. `null` when the project has no\n * persisted content schema (first run — the session seeds fixtures and the\n * persister's baseline will persist them on the first edit). A schema that\n * contains only studio system collections counts as \"no content persisted\":\n * system stores (saved views, routes) may create the schema record before any\n * content baseline ran.\n */\nexport async function loadHydratedCms(\n  operations: OperationsClient,\n  projectId: string,\n): Promise<OperationResult<HydratedCms | null>> {\n  const schema = await operations.schema.get({ projectId })\n  if (!schema.ok) {\n    return schema.error.code === 'not-found' ? { ok: true, value: null } : schema\n  }\n  const collections = schema.value.collections.filter(\n    (collection) => !STUDIO_SYSTEM_COLLECTION_IDS.has(collection.id),\n  )\n  if (collections.length === 0) return { ok: true, value: null }\n  const documents = await operations.documents.list({ projectId })\n  if (!documents.ok) return documents\n  // The project's asset records (assets table), wired into the preview lookup so\n  // listing/relation results resolve their nested `asset` fields (EC-262). Non-fatal:\n  // a failed asset list degrades previews to no images, never blocks the session.\n  const assets = await operations.assets.list({ projectId })\n  const contentIds = new Set(collections.map((collection) => collection.id))\n  const contentRecords = documents.value.filter((record) =>\n    contentIds.has(record.document.collection),\n  )\n  // EC-224: a record is published when its version pointer is set — the same\n  // gate delivery reads. There is no flat-state fallback (the field is gone).\n  const isRecordPublished = (record: (typeof contentRecords)[number]) =>\n    record.publishedVersion !== undefined\n  return {\n    ok: true,\n    value: {\n      collections,\n      // The live row hydrates AS PERSISTED — a continuous draft (EC-224). We no\n      // longer stamp a `state:'published'` mirror: published-ness is the version\n      // pointer (`publishedKeys`), which every studio reader now consults (the\n      // table badge/$state via `isPublished`, the preview engine via the pin).\n      documents: contentRecords.map((record) => record.document),\n      publishedKeys: contentRecords\n        .filter(isRecordPublished)\n        .map((record) => documentKey(record.document)),\n      // EC-445: carry each record's `updatedAt` onto the session for the $updatedAt\n      // column — a per-document metadata accessor, exactly like `publishedKeys`.\n      timestamps: Object.fromEntries(\n        contentRecords.map((record) => [documentKey(record.document), record.updatedAt]),\n      ),\n      // EC-447: carry each PUBLISHED record's materialized `publishedAt` for the\n      // $publishedAt column. Only records that actually have one contribute (no\n      // session-start fallback) — an absent entry is a real \"no publish date\".\n      publishTimestamps: Object.fromEntries(\n        contentRecords\n          .filter((record) => record.publishedAt !== undefined)\n          .map((record) => [documentKey(record.document), record.publishedAt as string]),\n      ),\n      assets: assets.ok ? assets.value : [],\n    },\n  }\n}\n\n/**\n * Load everything a project session hydrates from. Post-EC-287 that is just the\n * persisted CMS content (schema + documents + assets): the project graph and its\n * publish path are gone, so there is no graph revision or graph-publishing state\n * to load. Per-document `publishedVersion` (EC-224) is the only published surface.\n */\nexport async function loadProjectSession(\n  operations: OperationsClient,\n  projectId: string,\n): Promise<OperationResult<HydratedProjectSession>> {\n  const cms = await loadHydratedCms(operations, projectId)\n  if (!cms.ok) return cms\n  return { ok: true, value: { cms: cms.value } }\n}\n"]}
+{"version":3,"file":"session-hydration.js","sourceRoot":"","sources":["../../../src/lib/operations/session-hydration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AAGtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAG/D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,iBAAiB,CAAA;AAEjD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAwB,IAAI,GAAG,CAAC;IACvE,uBAAuB;IACvB,gBAAgB;CACjB,CAAC,CAAA;AA2DF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,UAA4B,EAC5B,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IACzD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAA;IAC/E,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CACjD,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,4BAA4B,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CACjE,CAAA;IACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IAC9D,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAChE,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAA;IACnC,+EAA+E;IAC/E,oFAAoF;IACpF,gFAAgF;IAChF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1E,MAAM,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACvD,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAC3C,CAAA;IACD,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,iBAAiB,GAAG,CAAC,MAAuC,EAAE,EAAE,CACpE,MAAM,CAAC,gBAAgB,KAAK,SAAS,CAAA;IACvC,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,WAAW;YACX,0EAA0E;YAC1E,2EAA2E;YAC3E,yEAAyE;YACzE,yEAAyE;YACzE,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC1D,aAAa,EAAE,cAAc;iBAC1B,MAAM,CAAC,iBAAiB,CAAC;iBACzB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChD,8EAA8E;YAC9E,2EAA2E;YAC3E,UAAU,EAAE,MAAM,CAAC,WAAW,CAC5B,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CACjF;YACD,2EAA2E;YAC3E,0EAA0E;YAC1E,yEAAyE;YACzE,iBAAiB,EAAE,MAAM,CAAC,WAAW,CACnC,cAAc;iBACX,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC;iBACpD,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,WAAqB,CAAC,CAAC,CACjF;YACD,2EAA2E;YAC3E,2EAA2E;YAC3E,+DAA+D;YAC/D,WAAW,EAAE,cAAc;iBACxB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,qBAAqB,KAAK,IAAI,CAAC;iBACzD,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;SACtC;KACF,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAA4B,EAC5B,SAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IACxD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAA;IACvB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,CAAA;AAChD,CAAC","sourcesContent":["import { documentKey } from '@elytracms/core/cms-core'\nimport type { CmsDocument, CollectionDef } from '@elytracms/core/cms-core'\nimport type { AssetRecord } from '@elytracms/core/persistence'\nimport { DATA_SOURCES_COLLECTION } from '../data/sources-store'\nimport type { OperationResult, OperationsClient } from './operations-package'\n\n/**\n * Legacy marker (EC-246b): editor-owned saved views are retired — list\n * presentation is config-as-code now (named views live in `cms/`). The id is kept\n * only so hydration keeps excluding any `cms-saved-views` documents a pre-EC-246b\n * deployment persisted, so they never surface as content.\n */\nexport const VIEWS_COLLECTION = 'cms-saved-views'\n\n/**\n * Persisted-session hydration (Milestone B sign-off fix, EC-177 gap 1).\n *\n * Against a persistent backend (Convex mode) a studio session must BOOT from\n * what is persisted — the saved CMS schema + documents (+ asset records) — and\n * fall back to the deterministic fixtures only when the project has nothing\n * persisted yet (first run). Before this, every session seeded from fixtures,\n * so reloads hid the editor's work.\n *\n * EC-287: the DB-resident project graph and its publish path are retired —\n * layouts/config/schema/components are CODE, the DB holds content only. A\n * session no longer hydrates a graph revision or graph-publishing state; CMS\n * content (with per-document `publishedVersion`, EC-224) is the only persisted\n * surface a session boots from.\n *\n * This module is the pure load half: read-only `@elytracms/core/operations` queries\n * composed into one hydration result. `not-found` is a *normal* answer (the\n * first-run fallback); every other failure propagates as the structured\n * operation error so the gate renders it — never a silent fixture fallback.\n * The React gate that applies it lives in\n * `components/studio/project-session.tsx`. EC-361: the playground calls the\n * SAME loader (over the seeded in-memory adapter, through operations — AD-17)\n * to hydrate the canvas/preview content session; only the render-gating is\n * Convex-specific.\n */\n\n/**\n * Collections owned by studio subsystems (data sources, saved views). They live\n * in the same persisted schema but are NOT content: the CMS session, the\n * sidebar, and the content preview engine must never offer them as authorable\n * collections. Routes/redirects are NO LONGER system collections (EC-207): they\n * are config-sourced and never persisted to the backend.\n */\nexport const STUDIO_SYSTEM_COLLECTION_IDS: ReadonlySet<string> = new Set([\n  DATA_SOURCES_COLLECTION,\n  VIEWS_COLLECTION,\n])\n\n/** The persisted CMS content of a project: schema + documents, system collections excluded. */\nexport interface HydratedCms {\n  collections: CollectionDef[]\n  documents: CmsDocument[]\n  /**\n   * Published document keys (EC-224), via the version pointer: a record is\n   * published iff `publishedVersion` is set. The session boots its\n   * `publishedKeys` from this — published-ness is the pointer, nothing else.\n   */\n  publishedKeys: string[]\n  /**\n   * Per-document last-write timestamps (EC-445), keyed by `documentKey`\n   * (`collection:id`) → the persisted `cmsDocuments.updatedAt` ISO string. Backs the\n   * `$updatedAt` list column; the session seeds its `documentUpdatedAt` map from this.\n   * Optional so pre-EC-445 fixtures/callers stay valid (the session falls back to a\n   * session-start stamp for the seeded documents); `loadHydratedCms` always sets it.\n   */\n  timestamps?: Record<string, string>\n  /**\n   * Per-document FIRST-publish instants (EC-447), keyed by `documentKey`\n   * (`collection:id`) → the persisted `cmsDocuments.publishedAt` ISO string. Present\n   * only for documents that carry one (currently published, with a recorded publish\n   * instant); the session seeds its `documentPublishedAt` map from this. Backs the\n   * `$publishedAt` list column. UNLIKE {@link timestamps} there is no session-start\n   * fallback — an absent entry is a real \"no publish date\" (EmDash), and the store\n   * re-stamps/clears it authoritatively on publish/unpublish. Optional so pre-EC-447\n   * fixtures/callers stay valid; `loadHydratedCms` always sets it.\n   */\n  publishTimestamps?: Record<string, string>\n  /**\n   * Document keys whose working draft carries UNPUBLISHED CHANGES (EC-449) — the\n   * persisted `cmsDocuments.hasUnpublishedChanges === true` set, keyed like\n   * {@link publishedKeys}. Backs the amber \"changed\" state of the `$state` list\n   * dot; the session seeds its changed-set from this and re-stamps it\n   * authoritatively on save/publish/unpublish from the returned records. Only\n   * `true` flags contribute — an absent entry means \"no unpublished changes\"\n   * (`false` or not yet materialized both render the same dot). Optional so\n   * pre-EC-449 fixtures/callers stay valid; `loadHydratedCms` always sets it.\n   */\n  changedKeys?: string[]\n  /**\n   * The project's asset records (the `assets` table — NOT cms `asset`-collection\n   * documents). The preview content engine wires these into its lookup so listing/\n   * relation results resolve their `asset`-typed FIELDS (e.g. a ProductGrid product's\n   * `gallery`) to delivery shape — matching what the renderer's `resolveAsset` already\n   * does for static `asset` props (EC-262). Without them, the studio canvas renders\n   * such nested images blank even though the documents reference real assets.\n   */\n  assets: AssetRecord[]\n}\n\n/** Everything a Convex-mode session boots from. `null` fields mean \"nothing persisted\" (first run). */\nexport interface HydratedProjectSession {\n  /** Persisted CMS schema + documents, or `null` when no content schema was ever saved. */\n  cms: HydratedCms | null\n}\n\n/**\n * Load the persisted CMS content state. `null` when the project has no\n * persisted content schema (first run — the session seeds fixtures and the\n * persister's baseline will persist them on the first edit). A schema that\n * contains only studio system collections counts as \"no content persisted\":\n * system stores (saved views, routes) may create the schema record before any\n * content baseline ran.\n */\nexport async function loadHydratedCms(\n  operations: OperationsClient,\n  projectId: string,\n): Promise<OperationResult<HydratedCms | null>> {\n  const schema = await operations.schema.get({ projectId })\n  if (!schema.ok) {\n    return schema.error.code === 'not-found' ? { ok: true, value: null } : schema\n  }\n  const collections = schema.value.collections.filter(\n    (collection) => !STUDIO_SYSTEM_COLLECTION_IDS.has(collection.id),\n  )\n  if (collections.length === 0) return { ok: true, value: null }\n  const documents = await operations.documents.list({ projectId })\n  if (!documents.ok) return documents\n  // The project's asset records (assets table), wired into the preview lookup so\n  // listing/relation results resolve their nested `asset` fields (EC-262). Non-fatal:\n  // a failed asset list degrades previews to no images, never blocks the session.\n  const assets = await operations.assets.list({ projectId })\n  const contentIds = new Set(collections.map((collection) => collection.id))\n  const contentRecords = documents.value.filter((record) =>\n    contentIds.has(record.document.collection),\n  )\n  // EC-224: a record is published when its version pointer is set — the same\n  // gate delivery reads. There is no flat-state fallback (the field is gone).\n  const isRecordPublished = (record: (typeof contentRecords)[number]) =>\n    record.publishedVersion !== undefined\n  return {\n    ok: true,\n    value: {\n      collections,\n      // The live row hydrates AS PERSISTED — a continuous draft (EC-224). We no\n      // longer stamp a `state:'published'` mirror: published-ness is the version\n      // pointer (`publishedKeys`), which every studio reader now consults (the\n      // table badge/$state via `isPublished`, the preview engine via the pin).\n      documents: contentRecords.map((record) => record.document),\n      publishedKeys: contentRecords\n        .filter(isRecordPublished)\n        .map((record) => documentKey(record.document)),\n      // EC-445: carry each record's `updatedAt` onto the session for the $updatedAt\n      // column — a per-document metadata accessor, exactly like `publishedKeys`.\n      timestamps: Object.fromEntries(\n        contentRecords.map((record) => [documentKey(record.document), record.updatedAt]),\n      ),\n      // EC-447: carry each PUBLISHED record's materialized `publishedAt` for the\n      // $publishedAt column. Only records that actually have one contribute (no\n      // session-start fallback) — an absent entry is a real \"no publish date\".\n      publishTimestamps: Object.fromEntries(\n        contentRecords\n          .filter((record) => record.publishedAt !== undefined)\n          .map((record) => [documentKey(record.document), record.publishedAt as string]),\n      ),\n      // EC-449: the documents whose draft carries unpublished changes (the amber\n      // list dot) — only materialized `true` flags contribute (absent/false both\n      // mean \"not changed\"; the flag only exists on published docs).\n      changedKeys: contentRecords\n        .filter((record) => record.hasUnpublishedChanges === true)\n        .map((record) => documentKey(record.document)),\n      assets: assets.ok ? assets.value : [],\n    },\n  }\n}\n\n/**\n * Load everything a project session hydrates from. Post-EC-287 that is just the\n * persisted CMS content (schema + documents + assets): the project graph and its\n * publish path are gone, so there is no graph revision or graph-publishing state\n * to load. Per-document `publishedVersion` (EC-224) is the only published surface.\n */\nexport async function loadProjectSession(\n  operations: OperationsClient,\n  projectId: string,\n): Promise<OperationResult<HydratedProjectSession>> {\n  const cms = await loadHydratedCms(operations, projectId)\n  if (!cms.ok) return cms\n  return { ok: true, value: { cms: cms.value } }\n}\n"]}

package/dist/lib/persistence/convex-adapter.js

@@ -25,6 +25,11 @@ function docRecordFromDoc(doc) {
         // EC-447: carry the materialized publish instant onto the contract record so the
         // studio's $publishedAt column + its reconcile read the authoritative value.
         ...(doc.publishedAt !== undefined ? { publishedAt: doc.publishedAt } : {}),
+        // EC-449: carry the materialized changed flag so hydration + the store's
+        // save/publish/unpublish reconciles read the authoritative verdict.
+        ...(doc.hasUnpublishedChanges !== undefined
+            ? { hasUnpublishedChanges: doc.hasUnpublishedChanges }
+            : {}),
         createdAt: doc.createdAt,
         updatedAt: doc.updatedAt,
     };