@elytracms/studio 0.0.77 → 0.0.79

package/dist/lib/assets/browser-blob-storage.js

@@ -0,0 +1,86 @@
+import { InMemoryBlobStorage } from '@elytracms/core/persistence';
+/**
+ * The real browser minter: an object URL backed by a same-process `Blob`.
+ * Deliberately thin and untested in Node (mirrors `canvasVariantEncoder` in
+ * `thumbnail.ts` — a DOM shell around a pure/injectable orchestrator).
+ */
+export const objectUrlMinter = (data, contentType) => URL.createObjectURL(new Blob([data.slice()], { type: contentType || 'application/octet-stream' }));
+/** The real browser revoker: releases an object URL's underlying resources. */
+export const objectUrlRevoker = (url) => {
+    URL.revokeObjectURL(url);
+};
+/**
+ * Wraps a `BlobStorageAdapter` so `url()`/`resolveUrl()` return a browser-
+ * displayable URL instead of the inner adapter's opaque locator (EC-459). See
+ * the module doc above for the full rationale.
+ */
+export class BrowserBlobStorage {
+    inner;
+    mint;
+    revoke;
+    /** storageKey → minted display URL, populated at the moment bytes are known. */
+    displayUrls = new Map();
+    constructor(options = {}) {
+        this.inner = options.inner ?? new InMemoryBlobStorage();
+        this.mint = options.mint ?? objectUrlMinter;
+        this.revoke = options.revoke ?? objectUrlRevoker;
+    }
+    /**
+     * Mint (or re-mint) the display URL for `key`. A re-put under the same key
+     * (re-upload / overwrite) revokes the stale URL first, so no object URL leaks
+     * and no surface can ever show stale bytes under a reused key.
+     */
+    remember(key, data, contentType) {
+        const previous = this.displayUrls.get(key);
+        if (previous)
+            this.revoke(previous);
+        this.displayUrls.set(key, this.mint(data, contentType ?? 'application/octet-stream'));
+    }
+    async put(key, data, contentType) {
+        await this.inner.put(key, data, contentType);
+        this.remember(key, data, contentType);
+    }
+    async get(key) {
+        return this.inner.get(key);
+    }
+    url(key) {
+        // Fall back to the inner adapter's own locator only when this wrapper never
+        // saw the bytes (e.g. a seed record whose metadata carries no stored blob at
+        // all) — the same "no bytes, no pretending" behaviour the inner adapter has
+        // always had; nothing here silently invents a broken image.
+        return this.displayUrls.get(key) ?? this.inner.url(key);
+    }
+    async has(key) {
+        return this.inner.has(key);
+    }
+    async delete(key) {
+        await this.inner.delete(key);
+        const cached = this.displayUrls.get(key);
+        if (cached) {
+            this.revoke(cached);
+            this.displayUrls.delete(key);
+        }
+    }
+    async store(data, contentType) {
+        if (!this.inner.store) {
+            throw new Error('BrowserBlobStorage requires an inner adapter that implements store().');
+        }
+        const key = await this.inner.store(data, contentType);
+        this.remember(key, data, contentType);
+        return key;
+    }
+    async resolveUrl(key) {
+        const cached = this.displayUrls.get(key);
+        if (cached)
+            return cached;
+        // Not minted through THIS wrapper — fall back to whatever the inner adapter
+        // can resolve (still `undefined` when genuinely no bytes exist: scope §5,
+        // an explicit missing state, never a silently broken image).
+        return this.inner.resolveUrl ? this.inner.resolveUrl(key) : undefined;
+    }
+}
+/** Convenience factory — `createBrowserBlobStorage()` wraps a fresh `InMemoryBlobStorage`. */
+export function createBrowserBlobStorage(options) {
+    return new BrowserBlobStorage(options);
+}
+//# sourceMappingURL=browser-blob-storage.js.map

package/dist/lib/assets/browser-blob-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-blob-storage.js","sourceRoot":"","sources":["../../../src/lib/assets/browser-blob-storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AAyCjE;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAc,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,CAC9D,GAAG,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,EAAc,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,IAAI,0BAA0B,EAAE,CAAC,CAAC,CAAA;AAEhH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAe,CAAC,GAAG,EAAE,EAAE;IAClD,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;AAC1B,CAAC,CAAA;AAWD;;;;GAIG;AACH,MAAM,OAAO,kBAAkB;IACZ,KAAK,CAAoB;IACzB,IAAI,CAAW;IACf,MAAM,CAAY;IACnC,gFAAgF;IAC/D,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAA;IAExD,YAAY,UAAqC,EAAE;QACjD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,mBAAmB,EAAE,CAAA;QACvD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,eAAe,CAAA;QAC3C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,gBAAgB,CAAA;IAClD,CAAC;IAED;;;;OAIG;IACK,QAAQ,CAAC,GAAW,EAAE,IAAgB,EAAE,WAA+B;QAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC1C,IAAI,QAAQ;YAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QACnC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,IAAI,0BAA0B,CAAC,CAAC,CAAA;IACvF,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,IAAgB,EAAE,WAAoB;QAC3D,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,CAAA;QAC5C,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC5B,CAAC;IAED,GAAG,CAAC,GAAW;QACb,4EAA4E;QAC5E,6EAA6E;QAC7E,4EAA4E;QAC5E,4DAA4D;QAC5D,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACzD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC5B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACnB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAgB,EAAE,WAAoB;QAChD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAA;QAC1F,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QACrD,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,CAAA;QACrC,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAW;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAA;QACzB,4EAA4E;QAC5E,0EAA0E;QAC1E,6DAA6D;QAC7D,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACvE,CAAC;CACF;AAED,8FAA8F;AAC9F,MAAM,UAAU,wBAAwB,CAAC,OAAmC;IAC1E,OAAO,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAA;AACxC,CAAC","sourcesContent":["import { InMemoryBlobStorage } from '@elytracms/core/persistence'\nimport type { BlobStorageAdapter } from '@elytracms/core/persistence'\n\n/**\n * Studio-side (playground-only) blob storage wrapper (EC-459).\n *\n * Root cause this fixes: `InMemoryBlobStorage` (`@elytracms/core/persistence`)\n * mints `url(key)` as an opaque `memory://blobs/<key>` locator. That is correct\n * for its job — Node tests and programmatic inspection never need a real\n * browser resource — but the studio's upload flow (`upload.ts`) bakes\n * `blobs.resolveUrl?.(storageKey) ?? blobs.url(storageKey)` straight into the\n * persisted `AssetRecord.url` (and the EC-400 thumb variant's `url`). Every\n * surface that then puts that value in an `<img src>` — the asset library grid,\n * the compact field preview, the focal-point editor, and (worst of all, no\n * gating at all) the canvas iframe's resolved-asset renderer — hands the\n * browser a URL it can never fetch. Pixels never render; the canvas iframe\n * shows an actual broken-image icon (`naturalWidth === 0`).\n *\n * The fix: wrap the byte store, not replace it. `put`/`store` still delegate\n * unchanged to `inner` (an `InMemoryBlobStorage` by default, or any adapter a\n * test wants), so bytes live exactly where they always did. The moment bytes\n * are known, THIS wrapper additionally mints a real browser-displayable URL\n * (an object URL by default) and serves THAT from `url()`/`resolveUrl()` —\n * so the value the upload flow bakes into the record is something an `<img>`\n * can actually load. `@elytracms/core`'s `InMemoryBlobStorage` is untouched and\n * stays platform-neutral (it still runs fine under Node tests); the one\n * DOM-touching function (`objectUrlMinter`, using the real `Blob`/`URL` globals)\n * is injected, so this whole orchestrator — caching, delegation, revoke-on-\n * delete/overwrite — is unit-testable in Node with a fake minter.\n *\n * Playground-only by construction: nothing calls this in the Convex/connected\n * path, and the `BlobStorageAdapter` interface is unchanged, so the delivery\n * wire and the connected-mode adapter are untouched.\n */\n\n/** Mints a browser-displayable URL from raw bytes. Injected for Node testability. */\nexport type UrlMinter = (data: Uint8Array, contentType: string) => string\n\n/** Releases a previously-minted URL's resources (e.g. `URL.revokeObjectURL`). */\nexport type UrlRevoker = (url: string) => void\n\n/**\n * The real browser minter: an object URL backed by a same-process `Blob`.\n * Deliberately thin and untested in Node (mirrors `canvasVariantEncoder` in\n * `thumbnail.ts` — a DOM shell around a pure/injectable orchestrator).\n */\nexport const objectUrlMinter: UrlMinter = (data, contentType) =>\n  URL.createObjectURL(new Blob([data.slice() as BlobPart], { type: contentType || 'application/octet-stream' }))\n\n/** The real browser revoker: releases an object URL's underlying resources. */\nexport const objectUrlRevoker: UrlRevoker = (url) => {\n  URL.revokeObjectURL(url)\n}\n\nexport interface BrowserBlobStorageOptions {\n  /** The wrapped adapter that actually holds the bytes. Defaults to a fresh `InMemoryBlobStorage`. */\n  inner?: BlobStorageAdapter\n  /** Defaults to {@link objectUrlMinter}; tests inject a deterministic fake. */\n  mint?: UrlMinter\n  /** Defaults to {@link objectUrlRevoker}; tests inject a fake to assert revocation. */\n  revoke?: UrlRevoker\n}\n\n/**\n * Wraps a `BlobStorageAdapter` so `url()`/`resolveUrl()` return a browser-\n * displayable URL instead of the inner adapter's opaque locator (EC-459). See\n * the module doc above for the full rationale.\n */\nexport class BrowserBlobStorage implements BlobStorageAdapter {\n  private readonly inner: BlobStorageAdapter\n  private readonly mint: UrlMinter\n  private readonly revoke: UrlRevoker\n  /** storageKey → minted display URL, populated at the moment bytes are known. */\n  private readonly displayUrls = new Map<string, string>()\n\n  constructor(options: BrowserBlobStorageOptions = {}) {\n    this.inner = options.inner ?? new InMemoryBlobStorage()\n    this.mint = options.mint ?? objectUrlMinter\n    this.revoke = options.revoke ?? objectUrlRevoker\n  }\n\n  /**\n   * Mint (or re-mint) the display URL for `key`. A re-put under the same key\n   * (re-upload / overwrite) revokes the stale URL first, so no object URL leaks\n   * and no surface can ever show stale bytes under a reused key.\n   */\n  private remember(key: string, data: Uint8Array, contentType: string | undefined): void {\n    const previous = this.displayUrls.get(key)\n    if (previous) this.revoke(previous)\n    this.displayUrls.set(key, this.mint(data, contentType ?? 'application/octet-stream'))\n  }\n\n  async put(key: string, data: Uint8Array, contentType?: string): Promise<void> {\n    await this.inner.put(key, data, contentType)\n    this.remember(key, data, contentType)\n  }\n\n  async get(key: string): Promise<Uint8Array | undefined> {\n    return this.inner.get(key)\n  }\n\n  url(key: string): string {\n    // Fall back to the inner adapter's own locator only when this wrapper never\n    // saw the bytes (e.g. a seed record whose metadata carries no stored blob at\n    // all) — the same \"no bytes, no pretending\" behaviour the inner adapter has\n    // always had; nothing here silently invents a broken image.\n    return this.displayUrls.get(key) ?? this.inner.url(key)\n  }\n\n  async has(key: string): Promise<boolean> {\n    return this.inner.has(key)\n  }\n\n  async delete(key: string): Promise<void> {\n    await this.inner.delete(key)\n    const cached = this.displayUrls.get(key)\n    if (cached) {\n      this.revoke(cached)\n      this.displayUrls.delete(key)\n    }\n  }\n\n  async store(data: Uint8Array, contentType?: string): Promise<string> {\n    if (!this.inner.store) {\n      throw new Error('BrowserBlobStorage requires an inner adapter that implements store().')\n    }\n    const key = await this.inner.store(data, contentType)\n    this.remember(key, data, contentType)\n    return key\n  }\n\n  async resolveUrl(key: string): Promise<string | undefined> {\n    const cached = this.displayUrls.get(key)\n    if (cached) return cached\n    // Not minted through THIS wrapper — fall back to whatever the inner adapter\n    // can resolve (still `undefined` when genuinely no bytes exist: scope §5,\n    // an explicit missing state, never a silently broken image).\n    return this.inner.resolveUrl ? this.inner.resolveUrl(key) : undefined\n  }\n}\n\n/** Convenience factory — `createBrowserBlobStorage()` wraps a fresh `InMemoryBlobStorage`. */\nexport function createBrowserBlobStorage(options?: BrowserBlobStorageOptions): BlobStorageAdapter {\n  return new BrowserBlobStorage(options)\n}\n"]}

package/dist/lib/assets/index.d.ts

@@ -9,3 +9,5 @@ export * from './thumbnail.js';
 export * from './backfill-thumbs.js';
 export * from './upload.js';
 export * from './delete-asset.js';
+export * from './asset-url.js';
+export * from './browser-blob-storage.js';

package/dist/lib/assets/index.js

@@ -9,4 +9,6 @@ export * from './thumbnail.js';
 export * from './backfill-thumbs.js';
 export * from './upload.js';
 export * from './delete-asset.js';
+export * from './asset-url.js';
+export * from './browser-blob-storage.js';
 //# sourceMappingURL=index.js.map

package/dist/lib/assets/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/assets/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,cAAc,gBAAgB,CAAA;AAC9B,cAAc,oBAAoB,CAAA;AAClC,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA;AACjC,cAAc,UAAU,CAAA;AACxB,cAAc,gBAAgB,CAAA","sourcesContent":["/**\n * Asset upload, deletion, and usage logic (EC-151). Pure/injectable modules:\n * the studio UI consumes these; storage is reached only through the\n * `BlobStorageAdapter` boundary.\n */\nexport * from './upload-state'\nexport * from './image-dimensions'\nexport * from './thumbnail'\nexport * from './backfill-thumbs'\nexport * from './upload'\nexport * from './delete-asset'\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/assets/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,cAAc,gBAAgB,CAAA;AAC9B,cAAc,oBAAoB,CAAA;AAClC,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA;AACjC,cAAc,UAAU,CAAA;AACxB,cAAc,gBAAgB,CAAA;AAC9B,cAAc,aAAa,CAAA;AAC3B,cAAc,wBAAwB,CAAA","sourcesContent":["/**\n * Asset upload, deletion, and usage logic (EC-151). Pure/injectable modules:\n * the studio UI consumes these; storage is reached only through the\n * `BlobStorageAdapter` boundary.\n */\nexport * from './upload-state'\nexport * from './image-dimensions'\nexport * from './thumbnail'\nexport * from './backfill-thumbs'\nexport * from './upload'\nexport * from './delete-asset'\nexport * from './asset-url'\nexport * from './browser-blob-storage'\n"]}

package/dist/lib/data/collection-content.d.ts

@@ -1,4 +1,4 @@
-import type { GetDocumentResult, ListDocumentsQuery, ListDocumentsResult, ResolvedDocument } from '@elytracms/core/content';
+import type { ContentQueryError, GetDocumentResult, ListDocumentsQuery, ListDocumentsResult, ResolvedDocument } from '@elytracms/core/content';
 import type { CmsDocument, CollectionDef, DocumentRef, Locale, LocaleConfig, RouteRecord } from '@elytracms/core/cms-core';
 import type { AssetRecord } from '@elytracms/core/persistence';
 import type { ListingQuery } from '@elytracms/core/runtime-renderer';
@@ -72,6 +72,14 @@ export declare const playgroundCollections: readonly CollectionDef[];
  * published-only — this does not weaken `live-is-published-only`.
  */
 export type CanvasPerspective = 'draft' | 'published';
+/** The current content-session epoch — bumps on every `configureContentSession`. */
+export declare function contentSessionEpoch(): number;
+/**
+ * Subscribe to content-session swaps (EC-460). The listener fires after every
+ * `configureContentSession`; returns the unsubscribe. Shaped for
+ * `useSyncExternalStore(subscribeContentSession, contentSessionEpoch)`.
+ */
+export declare function subscribeContentSession(listener: () => void): () => void;
 /**
  * Point the preview engine at a project's hydrated content — Convex hydration
  * or the playground's in-memory persisted state (EC-361), both through the same
@@ -118,6 +126,17 @@ export declare function resolveCanvasRelation(ref: DocumentRef, locale?: Locale,
  * state. Reuses the same `listDocuments` path as `runCollectionListQuery`.
  */
 export declare function resolveCanvasListing(query: ListingQuery, locale?: Locale, perspective?: CanvasPerspective): ResolvedDocument[];
+/**
+ * Statically validate a listing block's query against the ACTIVE session schema
+ * (EC-460, the never-silent rule): the exact `validateWhere`/`validateSort`/
+ * `validateLimit` checks `listDocuments` runs, WITHOUT executing the query — so
+ * the canvas can surface a config-invalid listing (a filter/sort field the
+ * collection doesn't declare `filterable`, an unknown collection) as a visible
+ * notice instead of the block's indistinguishable empty state. With no content
+ * session configured (boot instants, fixtures) there is no schema to judge
+ * against, so it reports nothing rather than false-flagging every listing.
+ */
+export declare function validateCanvasListingQuery(query: ListingQuery): ContentQueryError[];
 /**
  * Resolve a rich-text internal link's target document to its URL path for the canvas
  * (EC-291) — the studio analog of the host's baked links map. Derives the URL through

package/dist/lib/data/collection-content.js

@@ -1,4 +1,4 @@
-import { createContentClient, createContentContext, } from '@elytracms/core/content';
+import { createContentClient, createContentContext, queryError, validateLimit, validateSort, validateWhere, } from '@elytracms/core/content';
 import { documentKey, resolveDocumentTitle, sampleLocaleConfig } from '@elytracms/core/cms-core';
 import { getStudioLocale } from '../locale/locale-store.js';
 /**
@@ -14,6 +14,26 @@ let contentSession = null;
 let lookup = createLookup(playgroundCollections, [], []);
 // Keyed by `${locale}:${perspective}` (EC-300) — one deterministic client per pair.
 const clients = new Map();
+// EC-460: a monotonically increasing session epoch + listener set, so a REACT
+// surface (the canvas render context) can re-render when the session is
+// re-pointed at fresher content. The session itself stays a module global (the
+// EC-361 design); this only makes "it changed" observable — `configureContentSession`
+// remains the single setter.
+let sessionEpoch = 0;
+const sessionListeners = new Set();
+/** The current content-session epoch — bumps on every `configureContentSession`. */
+export function contentSessionEpoch() {
+    return sessionEpoch;
+}
+/**
+ * Subscribe to content-session swaps (EC-460). The listener fires after every
+ * `configureContentSession`; returns the unsubscribe. Shaped for
+ * `useSyncExternalStore(subscribeContentSession, contentSessionEpoch)`.
+ */
+export function subscribeContentSession(listener) {
+    sessionListeners.add(listener);
+    return () => sessionListeners.delete(listener);
+}
 /**
  * Point the preview engine at a project's hydrated content — Convex hydration
  * or the playground's in-memory persisted state (EC-361), both through the same
@@ -25,6 +45,9 @@ export function configureContentSession(next) {
         ? createLookup(next.collections, next.documents, next.publishedKeys, next.assets)
         : createLookup(playgroundCollections, [], []);
     clients.clear();
+    sessionEpoch += 1;
+    for (const listener of [...sessionListeners])
+        listener();
 }
 /** Whether a hydrated content session is configured (Convex mode). */
 export function hasContentSession() {
@@ -191,6 +214,33 @@ export function resolveCanvasListing(query, locale = getStudioLocale(), perspect
     });
     return result.ok ? result.documents : [];
 }
+/**
+ * Statically validate a listing block's query against the ACTIVE session schema
+ * (EC-460, the never-silent rule): the exact `validateWhere`/`validateSort`/
+ * `validateLimit` checks `listDocuments` runs, WITHOUT executing the query — so
+ * the canvas can surface a config-invalid listing (a filter/sort field the
+ * collection doesn't declare `filterable`, an unknown collection) as a visible
+ * notice instead of the block's indistinguishable empty state. With no content
+ * session configured (boot instants, fixtures) there is no schema to judge
+ * against, so it reports nothing rather than false-flagging every listing.
+ */
+export function validateCanvasListingQuery(query) {
+    if (contentSession === null)
+        return [];
+    const collection = playgroundCollection(query.collection);
+    if (!collection) {
+        return [
+            queryError('unknown-collection', `Collection "${query.collection}" is not defined.`, [
+                'collection',
+            ]),
+        ];
+    }
+    return [
+        ...validateWhere(collection, query.where),
+        ...(query.sort ? validateSort(collection, query.sort) : []),
+        ...(query.limit !== undefined ? validateLimit(query.limit) : []),
+    ];
+}
 /**
  * Resolve a rich-text internal link's target document to its URL path for the canvas
  * (EC-291) — the studio analog of the host's baked links map. Derives the URL through

package/dist/lib/data/collection-content.js.map

@@ -1 +1 @@
-{"version":3,"file":"collection-content.js","sourceRoot":"","sources":["../../../src/lib/data/collection-content.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,yBAAyB,CAAA;AAUhC,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAWhG,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAwDxD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,EAAE,CAAA;AAYjE,IAAI,cAAc,GAA+B,IAAI,CAAA;AACrD,IAAI,MAAM,GAAkB,YAAY,CAAC,qBAAqB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;AACvE,oFAAoF;AACpF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAA;AAEhD;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAgC;IACtE,cAAc,GAAG,IAAI,CAAA;IACrB,MAAM,GAAG,IAAI;QACX,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC;QACjF,CAAC,CAAC,YAAY,CAAC,qBAAqB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;IAC/C,OAAO,CAAC,KAAK,EAAE,CAAA;AACjB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,iBAAiB;IAC/B,OAAO,cAAc,KAAK,IAAI,CAAA;AAChC,CAAC;AAED,iFAAiF;AACjF,SAAS,iBAAiB;IACxB,OAAO,cAAc,EAAE,WAAW,IAAI,qBAAqB,CAAA;AAC7D,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,cAAc,EAAE,YAAY,IAAI,kBAAkB,CAAA;AAC3D,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,oBAAoB,CAAC,EAAU;IAC7C,OAAO,iBAAiB,EAAE,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;AACvE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,WAAqC;IAErC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QACpC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC;YAAE,OAAO,UAAU,CAAA;QACnF,MAAM,WAAW,GAAG,oBAAoB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QACvD,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,UAAU,CAAA;QAChD,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAC3F,CAAA;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,UAAU,CAAA;QACzC,OAAO;YACL,GAAG,UAAU;YACb,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACtC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CACjE;SACF,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,+EAA+E;AAC/E,SAAS,aAAa,CAAC,GAAgB;IACrC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAA;IACzB,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,EAAE,EAAE,EAAE,GAAG,CAAA;IAClC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,YAAY;QACvB,QAAQ,EAAE,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE;QACxE,WAAW,EAAE,WAAW;QACxB,QAAQ,EAAE,CAAC;QACX,GAAG,EAAE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;QAC9C,UAAU,EAAE,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE;QAChE,SAAS,EAAE,0BAA0B;QACrC,SAAS,EAAE,0BAA0B;KACtC,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CACnB,cAAwC,EACxC,SAAiC,EACjC,aAAiC,EACjC,YAAqC;IAErC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACjE,4EAA4E;IAC5E,+EAA+E;IAC/E,4EAA4E;IAC5E,6EAA6E;IAC7E,yEAAyE;IACzE,sEAAsE;IACtE,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC/D,MAAM,QAAQ,GAAG,CAAC,GAAgB,EAAyB,EAAE;QAC3D,IAAI,CAAC,SAAS;YAAE,OAAO,GAAG,CAAA;QAC1B,OAAO,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3E,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC9C,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IACxD,CAAC,CAAA;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAU,CAAC,CAChF,CAAA;IACD,yEAAyE;IACzE,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5E,6EAA6E;IAC7E,gEAAgE;IAChE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAA;IAC7C,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,GAAG,CAAC,UAAU,KAAK,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAA;IACxE,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,YAAY,IAAI,EAAE;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;IACtE,OAAO;QACL,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QAC3D,SAAS,EAAE,CAAC,YAAY,EAAE,EAAE,CAC1B,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,YAAY,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC1E,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,uEAAuE;QACvE,4EAA4E;QAC5E,kFAAkF;QAClF,0EAA0E;QAC1E,iDAAiD;QACjD,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,UAAU;KACnD,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,MAAc,EAAE,cAAiC,WAAW;IAC7E,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,WAAW,EAAE,CAAA;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACjC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAA;IAC7B,MAAM,MAAM,GAAG,mBAAmB,CAAC;QACjC,MAAM;QACN,OAAO,EAAE,oBAAoB,CAAC;YAC5B,MAAM;YACN,WAAW;YACX,OAAO,EAAE,kBAAkB,EAAE;SAC9B,CAAC;QACF,8EAA8E;QAC9E,0CAA0C;QAC1C,MAAM,EAAE,cAAc,EAAE,MAAM,IAAI,EAAE;KACrC,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IACxB,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,YAAoB,EACpB,QAA4B,EAAE,EAC9B,SAAiB,eAAe,EAAE;IAElC,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;AAC7D,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,qBAAqB,CACnC,YAAoB,EACpB,QAAgB,EAChB,SAAiB,eAAe,EAAE;IAElC,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;AAC9D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAgB,EAChB,SAAiB,eAAe,EAAE,EAClC,cAAiC,WAAW;IAE5C,OAAO,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;AAC5D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAmB,EACnB,SAAiB,eAAe,EAAE,EAClC,cAAiC,WAAW;IAE5C,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE;QAC5E,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7D,CAAC,CAAA;IACF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAA;AAC1C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAgB,EAChB,SAAiB,eAAe,EAAE,EAClC,cAAiC,WAAW;IAE5C,OAAO,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;AACxD,CAAC;AAQD,8EAA8E;AAC9E,MAAM,UAAU,qBAAqB,CAAC,YAAoB;IACxD,MAAM,UAAU,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAA;IACrD,MAAM,MAAM,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAA;IACnD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,CAAA;IACzB,2EAA2E;IAC3E,2EAA2E;IAC3E,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACpC,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,oBAAoB,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE;KAC3E,CAAC,CAAC,CAAA;AACL,CAAC","sourcesContent":["import {\n  createContentClient,\n  createContentContext,\n} from '@elytracms/core/content'\nimport type {\n  ContentClient,\n  ContentDocumentSource,\n  ContentLookup,\n  GetDocumentResult,\n  ListDocumentsQuery,\n  ListDocumentsResult,\n  ResolvedDocument,\n} from '@elytracms/core/content'\nimport { documentKey, resolveDocumentTitle, sampleLocaleConfig } from '@elytracms/core/cms-core'\nimport type {\n  CmsDocument,\n  CollectionDef,\n  DocumentRef,\n  Locale,\n  LocaleConfig,\n  RouteRecord,\n} from '@elytracms/core/cms-core'\nimport type { AssetRecord } from '@elytracms/core/persistence'\nimport type { ListingQuery } from '@elytracms/core/runtime-renderer'\nimport { getStudioLocale } from '../locale/locale-store'\n\n/**\n * The studio's content delivery engine for canvas previews (EC-166).\n *\n * Repeating sections and template pages preview *delivery-shaped* documents —\n * the exact shape `@elytracms/core/content` serves in production — so the canvas\n * shows what publishing will show. This module wires the canonical content\n * client (closed AD-3 query vocabulary, published perspective, EC-018 locale\n * fallback, depth-1 population, resolved assets) over a **content session**:\n *\n * - Convex mode: the project-session gate (`components/studio/project-session`)\n *   configures the session with the project's HYDRATED schema + documents, so\n *   \"Preview with\" lists and section previews show the live content — never\n *   fixture titles (EC-177 gap 1).\n * - Playground mode (EC-361): the SAME hydration loader runs over the seeded\n *   in-memory adapter (through operations — AD-17), so canvas listing/relation\n *   population resolves from the in-memory session documents with identical\n *   semantics. With no session configured (tests, boot instants, no persisted\n *   content) the engine serves nothing.\n *\n * Nothing here invents query semantics; both modes go through the same\n * canonical client.\n */\n\n/** The schema + documents the preview engine serves (one project session). */\nexport interface ContentSessionState {\n  collections: readonly CollectionDef[]\n  documents: readonly CmsDocument[]\n  /**\n   * Published document keys via the version POINTER (EC-224). When present, the\n   * preview's published perspective resolves by the pin — never the flat\n   * `state` enum — so it matches what delivery serves. Absent (playground\n   * fixtures / tests) → the rows' own `state` gates the perspective, unchanged.\n   */\n  publishedKeys?: readonly string[]\n  /** Locale config of the session content; defaults to the sample config. */\n  localeConfig?: LocaleConfig\n  /**\n   * The project's config-sourced routes (EC-207). Wired into the content client so\n   * the canvas preview's `resolveLink` (EC-291) derives a rich-text link's URL from\n   * the SAME routes delivery serves — the studio-live half of the host link bake.\n   * Absent (playground/tests) → no routes, so `resolveLink` returns null and a\n   * reference link degrades to the visible `unresolved-ref` issue.\n   */\n  routes?: readonly RouteRecord[]\n  /**\n   * The project's asset records (assets table). Wired into the lookup so the\n   * content client resolves `asset`-typed FIELDS on listing/relation results\n   * (e.g. a ProductGrid product's `gallery`) to delivery shape — the same assets\n   * the renderer's `resolveAsset` reads for static props (EC-262). Absent\n   * (playground/tests) → assets come only from `asset`-collection fixture docs.\n   */\n  assets?: readonly AssetRecord[]\n}\n\n/**\n * Default (no-session) collection schema: EMPTY. The studio ships no demo content\n * (Oli, 2026-06-19) — with no backend/content session configured, there is nothing\n * to preview, and the studio says so rather than serving fixtures. A real project's\n * collections + documents arrive via {@link configureContentSession} in BOTH modes\n * (EC-361): Convex hydration, or the playground's seeded in-memory adapter through\n * the same loader.\n */\nexport const playgroundCollections: readonly CollectionDef[] = []\n\n/**\n * The perspective a canvas preview resolves references against (EC-300/AD-16). The\n * canvas is draft-coherent: the editable Draft view resolves references to their\n * `'draft'` targets (so a just-made reusable shows immediately), the read-only\n * Published view resolves `'published'` (an honest preview of what delivery serves;\n * an unpublished hard ref shows the in-canvas placeholder). Delivery stays\n * published-only — this does not weaken `live-is-published-only`.\n */\nexport type CanvasPerspective = 'draft' | 'published'\n\nlet contentSession: ContentSessionState | null = null\nlet lookup: ContentLookup = createLookup(playgroundCollections, [], [])\n// Keyed by `${locale}:${perspective}` (EC-300) — one deterministic client per pair.\nconst clients = new Map<string, ContentClient>()\n\n/**\n * Point the preview engine at a project's hydrated content — Convex hydration\n * or the playground's in-memory persisted state (EC-361), both through the same\n * `loadHydratedCms` loader — or back at the empty no-session default (`null`).\n */\nexport function configureContentSession(next: ContentSessionState | null): void {\n  contentSession = next\n  lookup = next\n    ? createLookup(next.collections, next.documents, next.publishedKeys, next.assets)\n    : createLookup(playgroundCollections, [], [])\n  clients.clear()\n}\n\n/** Whether a hydrated content session is configured (Convex mode). */\nexport function hasContentSession(): boolean {\n  return contentSession !== null\n}\n\n/** The collections the preview engine currently serves (session or fixtures). */\nfunction activeCollections(): readonly CollectionDef[] {\n  return contentSession?.collections ?? playgroundCollections\n}\n\nfunction activeLocaleConfig(): LocaleConfig {\n  return contentSession?.localeConfig ?? sampleLocaleConfig\n}\n\n/** Resolve a collection in the active content session (fixtures in playground). */\nexport function playgroundCollection(id: string): CollectionDef | undefined {\n  return activeCollections().find((collection) => collection.id === id)\n}\n\n/**\n * Overlay the active session's canonical `filterable` declarations onto a\n * schema that doesn't carry any of its own. The inspector hands the Content\n * tab fixture collection defs; the filter/sort pickers must offer exactly the\n * EC-143 declaration set the delivery engine enforces, so both ends agree. A\n * collection that declares its own filterable fields is left untouched.\n */\nexport function withPlaygroundFilterable(\n  collections: readonly CollectionDef[],\n): readonly CollectionDef[] {\n  return collections.map((collection) => {\n    if (collection.fields.some((field) => field.filterable === true)) return collection\n    const counterpart = playgroundCollection(collection.id)\n    if (counterpart === undefined) return collection\n    const flagged = new Set(\n      counterpart.fields.filter((field) => field.filterable === true).map((field) => field.name),\n    )\n    if (flagged.size === 0) return collection\n    return {\n      ...collection,\n      fields: collection.fields.map((field) =>\n        flagged.has(field.name) ? { ...field, filterable: true } : field,\n      ),\n    }\n  })\n}\n\n/** Synthesize the persistence-shaped asset record the asset resolver reads. */\nfunction assetRecordOf(doc: CmsDocument): AssetRecord {\n  const values = doc.values\n  const alt = doc.localized?.en?.alt\n  return {\n    id: doc.id,\n    projectId: 'playground',\n    filename: typeof values.filename === 'string' ? values.filename : doc.id,\n    contentType: 'image/png',\n    byteSize: 0,\n    alt: typeof alt === 'string' ? alt : undefined,\n    storageKey: typeof values.url === 'string' ? values.url : doc.id,\n    createdAt: '2026-01-01T00:00:00.000Z',\n    updatedAt: '2026-01-01T00:00:00.000Z',\n  }\n}\n\nfunction createLookup(\n  collectionDefs: readonly CollectionDef[],\n  documents: readonly CmsDocument[],\n  publishedKeys?: readonly string[],\n  assetRecords?: readonly AssetRecord[],\n): ContentLookup {\n  const collections = new Map(collectionDefs.map((c) => [c.id, c]))\n  // EC-224: published-ness is the version POINTER, not the flat `state` enum.\n  // A hydrated session hands `publishedKeys` (the pinned set) → wrap each row as\n  // a `DocumentHistory` so the published perspective resolves by the pin (the\n  // live row is always a draft now) with ZERO dependence on `state`. Without a\n  // pointer set (playground fixtures / tests) we keep bare rows, whose own\n  // `state` gates the published perspective — byte-identical to before.\n  const published = publishedKeys ? new Set(publishedKeys) : null\n  const toSource = (doc: CmsDocument): ContentDocumentSource => {\n    if (!published) return doc\n    return published.has(documentKey({ collection: doc.collection, id: doc.id }))\n      ? { draft: doc, published: doc, versions: [] }\n      : { draft: doc, published: undefined, versions: [] }\n  }\n  const byKey = new Map(\n    documents.map((doc) => [`${doc.collection}:${doc.id}`, toSource(doc)] as const),\n  )\n  // Asset resolution source for `asset`-typed FIELDS on resolved documents\n  // (listing/relation results, e.g. a product's `gallery`). Two sources, real\n  // records last so they win: (1) `asset`-collection fixture documents — how\n  // playground/tests model assets; (2) the project's real asset-table records\n  // (EC-262) — a Convex session has its assets here, NOT as `asset` documents,\n  // so without these the content client resolves no nested image.\n  const assets = new Map<string, AssetRecord>()\n  for (const doc of documents) {\n    if (doc.collection === 'asset') assets.set(doc.id, assetRecordOf(doc))\n  }\n  for (const record of assetRecords ?? []) assets.set(record.id, record)\n  return {\n    collection: (id) => collections.get(id),\n    document: (ref) => byKey.get(`${ref.collection}:${ref.id}`),\n    documents: (collectionId) =>\n      documents.filter((doc) => doc.collection === collectionId).map(toSource),\n    asset: (id) => assets.get(id),\n    // Prefer the record's resolved servable `url` — the one the renderer's\n    // resolveAsset reads (EC-262). Real asset-table records carry a Convex blob\n    // locator in `storageKey` and the servable URL in `url`; fixture/`asset`-document\n    // records (assetRecordOf) leave `url` unset and store the servable url in\n    // `storageKey`. Falling back keeps both correct.\n    assetUrl: (asset) => asset.url ?? asset.storageKey,\n  }\n}\n\n/**\n * One deterministic client per (locale, perspective): EC-018 locale fallback,\n * draft-or-published perspective (EC-300/AD-16, default `'published'`). The studio's\n * ambient active locale (EC-176, `lib/locale`) picks the locale at query time, so the\n * canvas previews follow the locale switcher exactly like delivery would; the canvas's\n * Draft/Published view picks the perspective. The cache resets whenever the content\n * session changes.\n */\nfunction clientFor(locale: Locale, perspective: CanvasPerspective = 'published'): ContentClient {\n  const key = `${locale}:${perspective}`\n  const existing = clients.get(key)\n  if (existing) return existing\n  const client = createContentClient({\n    lookup,\n    context: createContentContext({\n      locale,\n      perspective,\n      locales: activeLocaleConfig(),\n    }),\n    // EC-291: the routes a rich-text link resolves against (config-sourced) — the\n    // studio-live half of the host link bake.\n    routes: contentSession?.routes ?? [],\n  })\n  clients.set(key, client)\n  return client\n}\n\n/**\n * Run a closed-vocabulary list query (AD-3: eq/in/lt/lte/gt/gte, AND-only,\n * filterable fields only) and return the delivery-shaped result. Invalid\n * queries come back as structured errors — never thrown, never silently\n * widened. Resolves in the studio's active locale unless one is passed.\n */\nexport function runCollectionListQuery(\n  collectionId: string,\n  query: ListDocumentsQuery = {},\n  locale: Locale = getStudioLocale(),\n): ListDocumentsResult {\n  return clientFor(locale).listDocuments(collectionId, query)\n}\n\n/** Resolve one document (by id or slug) into delivery shape. */\nexport function getCollectionDocument(\n  collectionId: string,\n  idOrSlug: string,\n  locale: Locale = getStudioLocale(),\n): GetDocumentResult {\n  return clientFor(locale).getDocument(collectionId, idOrSlug)\n}\n\n/**\n * Populate a composition-node `relation` prop to delivery shape for the canvas\n * (EC-254) — the studio analog of the host's baked relations map. Resolves the\n * ref through the active session's client (published perspective, active locale),\n * so the canvas previews a block's picked documents (a ProductGrid's products, a\n * Reusable's element) exactly as delivery renders them. `null` when the target is\n * missing or not visible → the block degrades to its own empty state.\n */\nexport function resolveCanvasRelation(\n  ref: DocumentRef,\n  locale: Locale = getStudioLocale(),\n  perspective: CanvasPerspective = 'published',\n): ResolvedDocument | null {\n  return clientFor(locale, perspective).resolveRelation(ref)\n}\n\n/**\n * Resolve a listing block's query to its documents for the canvas (EC-255) — the\n * studio analog of the host's baked listings map. Runs the query (collection +\n * AND-only filter, optional sort/limit) through the active session's client\n * (published perspective, active locale), so the canvas previews a dynamic grid (a\n * ProductGrid keyed to a category) exactly as delivery renders it. An invalid query\n * (structured, never thrown) or a non-list lookup yields `[]` → the block's empty\n * state. Reuses the same `listDocuments` path as `runCollectionListQuery`.\n */\nexport function resolveCanvasListing(\n  query: ListingQuery,\n  locale: Locale = getStudioLocale(),\n  perspective: CanvasPerspective = 'published',\n): ResolvedDocument[] {\n  const result = clientFor(locale, perspective).listDocuments(query.collection, {\n    where: query.where,\n    ...(query.sort ? { sort: query.sort } : {}),\n    ...(query.limit !== undefined ? { limit: query.limit } : {}),\n  })\n  return result.ok ? result.documents : []\n}\n\n/**\n * Resolve a rich-text internal link's target document to its URL path for the canvas\n * (EC-291) — the studio analog of the host's baked links map. Derives the URL through\n * the active session's client (published perspective, active locale, config-sourced\n * routes), so the canvas previews a `{type:'reference'}` link's `href` exactly as\n * delivery serves it. `null` when the target is unpublished, missing, or addressed by\n * no route → the rich-text renderer shows the EC-290 `unresolved-ref` issue. Reuses\n * the same `resolveLink` path as the host bake, so both agree on the derived URL.\n */\nexport function resolveCanvasLink(\n  ref: DocumentRef,\n  locale: Locale = getStudioLocale(),\n  perspective: CanvasPerspective = 'published',\n): string | null {\n  return clientFor(locale, perspective).resolveLink(ref)\n}\n\n/** A pickable entry of a collection (the template-page preview switcher). */\nexport interface CollectionEntrySummary {\n  id: string\n  label: string\n}\n\n/** Published entries of a collection, labeled by the schema's title field. */\nexport function listCollectionEntries(collectionId: string): CollectionEntrySummary[] {\n  const collection = playgroundCollection(collectionId)\n  const result = runCollectionListQuery(collectionId)\n  if (!result.ok) return []\n  // EC-242: label via the shared identity resolver (string `titleField` or a\n  // function pattern), over the delivery-shape values; falls back to the id.\n  return result.documents.map((doc) => ({\n    id: doc.id,\n    label: collection ? resolveDocumentTitle(collection, doc, doc.id) : doc.id,\n  }))\n}\n"]}
+{"version":3,"file":"collection-content.js","sourceRoot":"","sources":["../../../src/lib/data/collection-content.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,UAAU,EACV,aAAa,EACb,YAAY,EACZ,aAAa,GACd,MAAM,yBAAyB,CAAA;AAWhC,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAWhG,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAwDxD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B,EAAE,CAAA;AAYjE,IAAI,cAAc,GAA+B,IAAI,CAAA;AACrD,IAAI,MAAM,GAAkB,YAAY,CAAC,qBAAqB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;AACvE,oFAAoF;AACpF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAA;AAEhD,8EAA8E;AAC9E,wEAAwE;AACxE,+EAA+E;AAC/E,sFAAsF;AACtF,6BAA6B;AAC7B,IAAI,YAAY,GAAG,CAAC,CAAA;AACpB,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAc,CAAA;AAE9C,oFAAoF;AACpF,MAAM,UAAU,mBAAmB;IACjC,OAAO,YAAY,CAAA;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAoB;IAC1D,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC9B,OAAO,GAAG,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAgC;IACtE,cAAc,GAAG,IAAI,CAAA;IACrB,MAAM,GAAG,IAAI;QACX,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC;QACjF,CAAC,CAAC,YAAY,CAAC,qBAAqB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;IAC/C,OAAO,CAAC,KAAK,EAAE,CAAA;IACf,YAAY,IAAI,CAAC,CAAA;IACjB,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,gBAAgB,CAAC;QAAE,QAAQ,EAAE,CAAA;AAC1D,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,iBAAiB;IAC/B,OAAO,cAAc,KAAK,IAAI,CAAA;AAChC,CAAC;AAED,iFAAiF;AACjF,SAAS,iBAAiB;IACxB,OAAO,cAAc,EAAE,WAAW,IAAI,qBAAqB,CAAA;AAC7D,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,cAAc,EAAE,YAAY,IAAI,kBAAkB,CAAA;AAC3D,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,oBAAoB,CAAC,EAAU;IAC7C,OAAO,iBAAiB,EAAE,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;AACvE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,WAAqC;IAErC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QACpC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC;YAAE,OAAO,UAAU,CAAA;QACnF,MAAM,WAAW,GAAG,oBAAoB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QACvD,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,UAAU,CAAA;QAChD,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAC3F,CAAA;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,UAAU,CAAA;QACzC,OAAO;YACL,GAAG,UAAU;YACb,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACtC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CACjE;SACF,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,+EAA+E;AAC/E,SAAS,aAAa,CAAC,GAAgB;IACrC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAA;IACzB,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,EAAE,EAAE,EAAE,GAAG,CAAA;IAClC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,YAAY;QACvB,QAAQ,EAAE,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE;QACxE,WAAW,EAAE,WAAW;QACxB,QAAQ,EAAE,CAAC;QACX,GAAG,EAAE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;QAC9C,UAAU,EAAE,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE;QAChE,SAAS,EAAE,0BAA0B;QACrC,SAAS,EAAE,0BAA0B;KACtC,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CACnB,cAAwC,EACxC,SAAiC,EACjC,aAAiC,EACjC,YAAqC;IAErC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACjE,4EAA4E;IAC5E,+EAA+E;IAC/E,4EAA4E;IAC5E,6EAA6E;IAC7E,yEAAyE;IACzE,sEAAsE;IACtE,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC/D,MAAM,QAAQ,GAAG,CAAC,GAAgB,EAAyB,EAAE;QAC3D,IAAI,CAAC,SAAS;YAAE,OAAO,GAAG,CAAA;QAC1B,OAAO,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3E,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC9C,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IACxD,CAAC,CAAA;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAU,CAAC,CAChF,CAAA;IACD,yEAAyE;IACzE,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5E,6EAA6E;IAC7E,gEAAgE;IAChE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAA;IAC7C,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,GAAG,CAAC,UAAU,KAAK,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAA;IACxE,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,YAAY,IAAI,EAAE;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;IACtE,OAAO;QACL,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QAC3D,SAAS,EAAE,CAAC,YAAY,EAAE,EAAE,CAC1B,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,YAAY,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC1E,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,uEAAuE;QACvE,4EAA4E;QAC5E,kFAAkF;QAClF,0EAA0E;QAC1E,iDAAiD;QACjD,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,UAAU;KACnD,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,MAAc,EAAE,cAAiC,WAAW;IAC7E,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,WAAW,EAAE,CAAA;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACjC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAA;IAC7B,MAAM,MAAM,GAAG,mBAAmB,CAAC;QACjC,MAAM;QACN,OAAO,EAAE,oBAAoB,CAAC;YAC5B,MAAM;YACN,WAAW;YACX,OAAO,EAAE,kBAAkB,EAAE;SAC9B,CAAC;QACF,8EAA8E;QAC9E,0CAA0C;QAC1C,MAAM,EAAE,cAAc,EAAE,MAAM,IAAI,EAAE;KACrC,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IACxB,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,YAAoB,EACpB,QAA4B,EAAE,EAC9B,SAAiB,eAAe,EAAE;IAElC,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;AAC7D,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,qBAAqB,CACnC,YAAoB,EACpB,QAAgB,EAChB,SAAiB,eAAe,EAAE;IAElC,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;AAC9D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAgB,EAChB,SAAiB,eAAe,EAAE,EAClC,cAAiC,WAAW;IAE5C,OAAO,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;AAC5D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAmB,EACnB,SAAiB,eAAe,EAAE,EAClC,cAAiC,WAAW;IAE5C,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE;QAC5E,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7D,CAAC,CAAA;IACF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAA;AAC1C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAmB;IAC5D,IAAI,cAAc,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IACtC,MAAM,UAAU,GAAG,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IACzD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,UAAU,CAAC,oBAAoB,EAAE,eAAe,KAAK,CAAC,UAAU,mBAAmB,EAAE;gBACnF,YAAY;aACb,CAAC;SACH,CAAA;IACH,CAAC;IACD,OAAO;QACL,GAAG,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC;QACzC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAgB,EAChB,SAAiB,eAAe,EAAE,EAClC,cAAiC,WAAW;IAE5C,OAAO,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;AACxD,CAAC;AAQD,8EAA8E;AAC9E,MAAM,UAAU,qBAAqB,CAAC,YAAoB;IACxD,MAAM,UAAU,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAA;IACrD,MAAM,MAAM,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAA;IACnD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,CAAA;IACzB,2EAA2E;IAC3E,2EAA2E;IAC3E,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACpC,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,oBAAoB,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE;KAC3E,CAAC,CAAC,CAAA;AACL,CAAC","sourcesContent":["import {\n  createContentClient,\n  createContentContext,\n  queryError,\n  validateLimit,\n  validateSort,\n  validateWhere,\n} from '@elytracms/core/content'\nimport type {\n  ContentClient,\n  ContentDocumentSource,\n  ContentLookup,\n  ContentQueryError,\n  GetDocumentResult,\n  ListDocumentsQuery,\n  ListDocumentsResult,\n  ResolvedDocument,\n} from '@elytracms/core/content'\nimport { documentKey, resolveDocumentTitle, sampleLocaleConfig } from '@elytracms/core/cms-core'\nimport type {\n  CmsDocument,\n  CollectionDef,\n  DocumentRef,\n  Locale,\n  LocaleConfig,\n  RouteRecord,\n} from '@elytracms/core/cms-core'\nimport type { AssetRecord } from '@elytracms/core/persistence'\nimport type { ListingQuery } from '@elytracms/core/runtime-renderer'\nimport { getStudioLocale } from '../locale/locale-store'\n\n/**\n * The studio's content delivery engine for canvas previews (EC-166).\n *\n * Repeating sections and template pages preview *delivery-shaped* documents —\n * the exact shape `@elytracms/core/content` serves in production — so the canvas\n * shows what publishing will show. This module wires the canonical content\n * client (closed AD-3 query vocabulary, published perspective, EC-018 locale\n * fallback, depth-1 population, resolved assets) over a **content session**:\n *\n * - Convex mode: the project-session gate (`components/studio/project-session`)\n *   configures the session with the project's HYDRATED schema + documents, so\n *   \"Preview with\" lists and section previews show the live content — never\n *   fixture titles (EC-177 gap 1).\n * - Playground mode (EC-361): the SAME hydration loader runs over the seeded\n *   in-memory adapter (through operations — AD-17), so canvas listing/relation\n *   population resolves from the in-memory session documents with identical\n *   semantics. With no session configured (tests, boot instants, no persisted\n *   content) the engine serves nothing.\n *\n * Nothing here invents query semantics; both modes go through the same\n * canonical client.\n */\n\n/** The schema + documents the preview engine serves (one project session). */\nexport interface ContentSessionState {\n  collections: readonly CollectionDef[]\n  documents: readonly CmsDocument[]\n  /**\n   * Published document keys via the version POINTER (EC-224). When present, the\n   * preview's published perspective resolves by the pin — never the flat\n   * `state` enum — so it matches what delivery serves. Absent (playground\n   * fixtures / tests) → the rows' own `state` gates the perspective, unchanged.\n   */\n  publishedKeys?: readonly string[]\n  /** Locale config of the session content; defaults to the sample config. */\n  localeConfig?: LocaleConfig\n  /**\n   * The project's config-sourced routes (EC-207). Wired into the content client so\n   * the canvas preview's `resolveLink` (EC-291) derives a rich-text link's URL from\n   * the SAME routes delivery serves — the studio-live half of the host link bake.\n   * Absent (playground/tests) → no routes, so `resolveLink` returns null and a\n   * reference link degrades to the visible `unresolved-ref` issue.\n   */\n  routes?: readonly RouteRecord[]\n  /**\n   * The project's asset records (assets table). Wired into the lookup so the\n   * content client resolves `asset`-typed FIELDS on listing/relation results\n   * (e.g. a ProductGrid product's `gallery`) to delivery shape — the same assets\n   * the renderer's `resolveAsset` reads for static props (EC-262). Absent\n   * (playground/tests) → assets come only from `asset`-collection fixture docs.\n   */\n  assets?: readonly AssetRecord[]\n}\n\n/**\n * Default (no-session) collection schema: EMPTY. The studio ships no demo content\n * (Oli, 2026-06-19) — with no backend/content session configured, there is nothing\n * to preview, and the studio says so rather than serving fixtures. A real project's\n * collections + documents arrive via {@link configureContentSession} in BOTH modes\n * (EC-361): Convex hydration, or the playground's seeded in-memory adapter through\n * the same loader.\n */\nexport const playgroundCollections: readonly CollectionDef[] = []\n\n/**\n * The perspective a canvas preview resolves references against (EC-300/AD-16). The\n * canvas is draft-coherent: the editable Draft view resolves references to their\n * `'draft'` targets (so a just-made reusable shows immediately), the read-only\n * Published view resolves `'published'` (an honest preview of what delivery serves;\n * an unpublished hard ref shows the in-canvas placeholder). Delivery stays\n * published-only — this does not weaken `live-is-published-only`.\n */\nexport type CanvasPerspective = 'draft' | 'published'\n\nlet contentSession: ContentSessionState | null = null\nlet lookup: ContentLookup = createLookup(playgroundCollections, [], [])\n// Keyed by `${locale}:${perspective}` (EC-300) — one deterministic client per pair.\nconst clients = new Map<string, ContentClient>()\n\n// EC-460: a monotonically increasing session epoch + listener set, so a REACT\n// surface (the canvas render context) can re-render when the session is\n// re-pointed at fresher content. The session itself stays a module global (the\n// EC-361 design); this only makes \"it changed\" observable — `configureContentSession`\n// remains the single setter.\nlet sessionEpoch = 0\nconst sessionListeners = new Set<() => void>()\n\n/** The current content-session epoch — bumps on every `configureContentSession`. */\nexport function contentSessionEpoch(): number {\n  return sessionEpoch\n}\n\n/**\n * Subscribe to content-session swaps (EC-460). The listener fires after every\n * `configureContentSession`; returns the unsubscribe. Shaped for\n * `useSyncExternalStore(subscribeContentSession, contentSessionEpoch)`.\n */\nexport function subscribeContentSession(listener: () => void): () => void {\n  sessionListeners.add(listener)\n  return () => sessionListeners.delete(listener)\n}\n\n/**\n * Point the preview engine at a project's hydrated content — Convex hydration\n * or the playground's in-memory persisted state (EC-361), both through the same\n * `loadHydratedCms` loader — or back at the empty no-session default (`null`).\n */\nexport function configureContentSession(next: ContentSessionState | null): void {\n  contentSession = next\n  lookup = next\n    ? createLookup(next.collections, next.documents, next.publishedKeys, next.assets)\n    : createLookup(playgroundCollections, [], [])\n  clients.clear()\n  sessionEpoch += 1\n  for (const listener of [...sessionListeners]) listener()\n}\n\n/** Whether a hydrated content session is configured (Convex mode). */\nexport function hasContentSession(): boolean {\n  return contentSession !== null\n}\n\n/** The collections the preview engine currently serves (session or fixtures). */\nfunction activeCollections(): readonly CollectionDef[] {\n  return contentSession?.collections ?? playgroundCollections\n}\n\nfunction activeLocaleConfig(): LocaleConfig {\n  return contentSession?.localeConfig ?? sampleLocaleConfig\n}\n\n/** Resolve a collection in the active content session (fixtures in playground). */\nexport function playgroundCollection(id: string): CollectionDef | undefined {\n  return activeCollections().find((collection) => collection.id === id)\n}\n\n/**\n * Overlay the active session's canonical `filterable` declarations onto a\n * schema that doesn't carry any of its own. The inspector hands the Content\n * tab fixture collection defs; the filter/sort pickers must offer exactly the\n * EC-143 declaration set the delivery engine enforces, so both ends agree. A\n * collection that declares its own filterable fields is left untouched.\n */\nexport function withPlaygroundFilterable(\n  collections: readonly CollectionDef[],\n): readonly CollectionDef[] {\n  return collections.map((collection) => {\n    if (collection.fields.some((field) => field.filterable === true)) return collection\n    const counterpart = playgroundCollection(collection.id)\n    if (counterpart === undefined) return collection\n    const flagged = new Set(\n      counterpart.fields.filter((field) => field.filterable === true).map((field) => field.name),\n    )\n    if (flagged.size === 0) return collection\n    return {\n      ...collection,\n      fields: collection.fields.map((field) =>\n        flagged.has(field.name) ? { ...field, filterable: true } : field,\n      ),\n    }\n  })\n}\n\n/** Synthesize the persistence-shaped asset record the asset resolver reads. */\nfunction assetRecordOf(doc: CmsDocument): AssetRecord {\n  const values = doc.values\n  const alt = doc.localized?.en?.alt\n  return {\n    id: doc.id,\n    projectId: 'playground',\n    filename: typeof values.filename === 'string' ? values.filename : doc.id,\n    contentType: 'image/png',\n    byteSize: 0,\n    alt: typeof alt === 'string' ? alt : undefined,\n    storageKey: typeof values.url === 'string' ? values.url : doc.id,\n    createdAt: '2026-01-01T00:00:00.000Z',\n    updatedAt: '2026-01-01T00:00:00.000Z',\n  }\n}\n\nfunction createLookup(\n  collectionDefs: readonly CollectionDef[],\n  documents: readonly CmsDocument[],\n  publishedKeys?: readonly string[],\n  assetRecords?: readonly AssetRecord[],\n): ContentLookup {\n  const collections = new Map(collectionDefs.map((c) => [c.id, c]))\n  // EC-224: published-ness is the version POINTER, not the flat `state` enum.\n  // A hydrated session hands `publishedKeys` (the pinned set) → wrap each row as\n  // a `DocumentHistory` so the published perspective resolves by the pin (the\n  // live row is always a draft now) with ZERO dependence on `state`. Without a\n  // pointer set (playground fixtures / tests) we keep bare rows, whose own\n  // `state` gates the published perspective — byte-identical to before.\n  const published = publishedKeys ? new Set(publishedKeys) : null\n  const toSource = (doc: CmsDocument): ContentDocumentSource => {\n    if (!published) return doc\n    return published.has(documentKey({ collection: doc.collection, id: doc.id }))\n      ? { draft: doc, published: doc, versions: [] }\n      : { draft: doc, published: undefined, versions: [] }\n  }\n  const byKey = new Map(\n    documents.map((doc) => [`${doc.collection}:${doc.id}`, toSource(doc)] as const),\n  )\n  // Asset resolution source for `asset`-typed FIELDS on resolved documents\n  // (listing/relation results, e.g. a product's `gallery`). Two sources, real\n  // records last so they win: (1) `asset`-collection fixture documents — how\n  // playground/tests model assets; (2) the project's real asset-table records\n  // (EC-262) — a Convex session has its assets here, NOT as `asset` documents,\n  // so without these the content client resolves no nested image.\n  const assets = new Map<string, AssetRecord>()\n  for (const doc of documents) {\n    if (doc.collection === 'asset') assets.set(doc.id, assetRecordOf(doc))\n  }\n  for (const record of assetRecords ?? []) assets.set(record.id, record)\n  return {\n    collection: (id) => collections.get(id),\n    document: (ref) => byKey.get(`${ref.collection}:${ref.id}`),\n    documents: (collectionId) =>\n      documents.filter((doc) => doc.collection === collectionId).map(toSource),\n    asset: (id) => assets.get(id),\n    // Prefer the record's resolved servable `url` — the one the renderer's\n    // resolveAsset reads (EC-262). Real asset-table records carry a Convex blob\n    // locator in `storageKey` and the servable URL in `url`; fixture/`asset`-document\n    // records (assetRecordOf) leave `url` unset and store the servable url in\n    // `storageKey`. Falling back keeps both correct.\n    assetUrl: (asset) => asset.url ?? asset.storageKey,\n  }\n}\n\n/**\n * One deterministic client per (locale, perspective): EC-018 locale fallback,\n * draft-or-published perspective (EC-300/AD-16, default `'published'`). The studio's\n * ambient active locale (EC-176, `lib/locale`) picks the locale at query time, so the\n * canvas previews follow the locale switcher exactly like delivery would; the canvas's\n * Draft/Published view picks the perspective. The cache resets whenever the content\n * session changes.\n */\nfunction clientFor(locale: Locale, perspective: CanvasPerspective = 'published'): ContentClient {\n  const key = `${locale}:${perspective}`\n  const existing = clients.get(key)\n  if (existing) return existing\n  const client = createContentClient({\n    lookup,\n    context: createContentContext({\n      locale,\n      perspective,\n      locales: activeLocaleConfig(),\n    }),\n    // EC-291: the routes a rich-text link resolves against (config-sourced) — the\n    // studio-live half of the host link bake.\n    routes: contentSession?.routes ?? [],\n  })\n  clients.set(key, client)\n  return client\n}\n\n/**\n * Run a closed-vocabulary list query (AD-3: eq/in/lt/lte/gt/gte, AND-only,\n * filterable fields only) and return the delivery-shaped result. Invalid\n * queries come back as structured errors — never thrown, never silently\n * widened. Resolves in the studio's active locale unless one is passed.\n */\nexport function runCollectionListQuery(\n  collectionId: string,\n  query: ListDocumentsQuery = {},\n  locale: Locale = getStudioLocale(),\n): ListDocumentsResult {\n  return clientFor(locale).listDocuments(collectionId, query)\n}\n\n/** Resolve one document (by id or slug) into delivery shape. */\nexport function getCollectionDocument(\n  collectionId: string,\n  idOrSlug: string,\n  locale: Locale = getStudioLocale(),\n): GetDocumentResult {\n  return clientFor(locale).getDocument(collectionId, idOrSlug)\n}\n\n/**\n * Populate a composition-node `relation` prop to delivery shape for the canvas\n * (EC-254) — the studio analog of the host's baked relations map. Resolves the\n * ref through the active session's client (published perspective, active locale),\n * so the canvas previews a block's picked documents (a ProductGrid's products, a\n * Reusable's element) exactly as delivery renders them. `null` when the target is\n * missing or not visible → the block degrades to its own empty state.\n */\nexport function resolveCanvasRelation(\n  ref: DocumentRef,\n  locale: Locale = getStudioLocale(),\n  perspective: CanvasPerspective = 'published',\n): ResolvedDocument | null {\n  return clientFor(locale, perspective).resolveRelation(ref)\n}\n\n/**\n * Resolve a listing block's query to its documents for the canvas (EC-255) — the\n * studio analog of the host's baked listings map. Runs the query (collection +\n * AND-only filter, optional sort/limit) through the active session's client\n * (published perspective, active locale), so the canvas previews a dynamic grid (a\n * ProductGrid keyed to a category) exactly as delivery renders it. An invalid query\n * (structured, never thrown) or a non-list lookup yields `[]` → the block's empty\n * state. Reuses the same `listDocuments` path as `runCollectionListQuery`.\n */\nexport function resolveCanvasListing(\n  query: ListingQuery,\n  locale: Locale = getStudioLocale(),\n  perspective: CanvasPerspective = 'published',\n): ResolvedDocument[] {\n  const result = clientFor(locale, perspective).listDocuments(query.collection, {\n    where: query.where,\n    ...(query.sort ? { sort: query.sort } : {}),\n    ...(query.limit !== undefined ? { limit: query.limit } : {}),\n  })\n  return result.ok ? result.documents : []\n}\n\n/**\n * Statically validate a listing block's query against the ACTIVE session schema\n * (EC-460, the never-silent rule): the exact `validateWhere`/`validateSort`/\n * `validateLimit` checks `listDocuments` runs, WITHOUT executing the query — so\n * the canvas can surface a config-invalid listing (a filter/sort field the\n * collection doesn't declare `filterable`, an unknown collection) as a visible\n * notice instead of the block's indistinguishable empty state. With no content\n * session configured (boot instants, fixtures) there is no schema to judge\n * against, so it reports nothing rather than false-flagging every listing.\n */\nexport function validateCanvasListingQuery(query: ListingQuery): ContentQueryError[] {\n  if (contentSession === null) return []\n  const collection = playgroundCollection(query.collection)\n  if (!collection) {\n    return [\n      queryError('unknown-collection', `Collection \"${query.collection}\" is not defined.`, [\n        'collection',\n      ]),\n    ]\n  }\n  return [\n    ...validateWhere(collection, query.where),\n    ...(query.sort ? validateSort(collection, query.sort) : []),\n    ...(query.limit !== undefined ? validateLimit(query.limit) : []),\n  ]\n}\n\n/**\n * Resolve a rich-text internal link's target document to its URL path for the canvas\n * (EC-291) — the studio analog of the host's baked links map. Derives the URL through\n * the active session's client (published perspective, active locale, config-sourced\n * routes), so the canvas previews a `{type:'reference'}` link's `href` exactly as\n * delivery serves it. `null` when the target is unpublished, missing, or addressed by\n * no route → the rich-text renderer shows the EC-290 `unresolved-ref` issue. Reuses\n * the same `resolveLink` path as the host bake, so both agree on the derived URL.\n */\nexport function resolveCanvasLink(\n  ref: DocumentRef,\n  locale: Locale = getStudioLocale(),\n  perspective: CanvasPerspective = 'published',\n): string | null {\n  return clientFor(locale, perspective).resolveLink(ref)\n}\n\n/** A pickable entry of a collection (the template-page preview switcher). */\nexport interface CollectionEntrySummary {\n  id: string\n  label: string\n}\n\n/** Published entries of a collection, labeled by the schema's title field. */\nexport function listCollectionEntries(collectionId: string): CollectionEntrySummary[] {\n  const collection = playgroundCollection(collectionId)\n  const result = runCollectionListQuery(collectionId)\n  if (!result.ok) return []\n  // EC-242: label via the shared identity resolver (string `titleField` or a\n  // function pattern), over the delivery-shape values; falls back to the id.\n  return result.documents.map((doc) => ({\n    id: doc.id,\n    label: collection ? resolveDocumentTitle(collection, doc, doc.id) : doc.id,\n  }))\n}\n"]}

package/dist/lib/data/content-session-refresh.d.ts

@@ -0,0 +1,74 @@
+import type { OperationEvent } from '@elytracms/studio/lib/operations';
+/**
+ * Content-session write-sync (EC-460) — the root-cause fix for the playground
+ * population family.
+ *
+ * The canvas preview engine (`collection-content.ts`) resolves listings,
+ * relation picks, and rich-text links against a module-global content session
+ * that used to refresh ONLY at project boot and per CMS-surface mount
+ * (`project-session.tsx`). A document authored or published after the last of
+ * those hydrations was invisible to every canvas resolver while the picker UIs
+ * (which read the live CMS store) showed it — the listing rendered its empty
+ * state against real published same-session content, and a `multiple` relation
+ * resolved 1-of-3 / 0-of-3 picked chips, all silently.
+ *
+ * This module closes the loop at the ONE write chokepoint the studio already
+ * has: the operations lifecycle event bus ("validate → authorize → mutate →
+ * emit"; its documented consumers include cache invalidation, vision AD-7 —
+ * the reference index and revalidation webhooks attach the same way). Every
+ * SUCCEEDED command in a content-bearing domain marks the session stale; a
+ * registered refresher (the project session's own `loadCms`, so both modes run
+ * the identical `loadHydratedCms` → `configureContentSession` path — no new
+ * loader, no transport bypass, no second cache) re-hydrates it, debounced so a
+ * persister burst coalesces into one load.
+ *
+ * Refreshes only run while a CONSUMER (a mounted canvas) is registered — a
+ * session with no preview surface just keeps the stale flag and re-hydrates
+ * when the next consumer arrives, so connected mode never pays a per-autosave
+ * query while nobody is previewing. The pure orchestrator
+ * ({@link createContentSessionSync}) takes its timer + refresh injected, so the
+ * coalescing/latch behaviour is unit-tested in node (house pattern); the
+ * module-level singleton below is the app wiring.
+ */
+/** Domains whose succeeded commands change what the preview engine serves. */
+export declare const CONTENT_SESSION_WRITE_DOMAINS: ReadonlySet<string>;
+/** Whether an operation event invalidates the preview content session. */
+export declare function isContentSessionWrite(event: OperationEvent): boolean;
+export interface ContentSessionSyncDeps {
+    /** Re-hydrate the session (the project session's `loadCms`). Never throws upward. */
+    refresh: () => Promise<unknown>;
+    /** Trailing debounce for write bursts (ms). */
+    delayMs?: number;
+    /** Injectable timer pair (tests drive time manually). */
+    setTimer?: (fn: () => void, ms: number) => unknown;
+    clearTimer?: (handle: unknown) => void;
+}
+export interface ContentSessionSync {
+    /** A content-bearing write succeeded — refresh (debounced) if anyone previews. */
+    markStale(): void;
+    /** A preview surface mounted; returns its release. A stale session refreshes now. */
+    addConsumer(): () => void;
+    /** Whether a refresh is currently owed (test/introspection seam). */
+    isStale(): boolean;
+}
+/**
+ * The pure orchestrator: stale flag + consumer count + one coalesced refresh.
+ *
+ * - `markStale` with no consumers only flags; the next `addConsumer` refreshes.
+ * - `markStale` with consumers schedules a trailing debounce (bursts coalesce).
+ * - A `markStale` DURING an in-flight refresh re-runs once after it settles —
+ *   the refresh that was already reading may have missed that write.
+ */
+export declare function createContentSessionSync(deps: ContentSessionSyncDeps): ContentSessionSync;
+type Refresher = () => Promise<unknown>;
+/**
+ * Register the active project's session refresher (`ProjectSessionProvider`
+ * mounts it with its `loadCms`; leaving the project unregisters). Only one is
+ * active at a time — the studio shows one project per session.
+ */
+export declare function registerContentSessionRefresher(refresher: Refresher): () => void;
+/** Mark the shared session stale (the event-bus listener calls this). */
+export declare function markContentSessionStale(): void;
+/** Register a mounted preview consumer (the canvas); returns the release. */
+export declare function acquireContentSessionConsumer(): () => void;
+export {};

package/dist/lib/data/content-session-refresh.js

@@ -0,0 +1,138 @@
+/**
+ * Content-session write-sync (EC-460) — the root-cause fix for the playground
+ * population family.
+ *
+ * The canvas preview engine (`collection-content.ts`) resolves listings,
+ * relation picks, and rich-text links against a module-global content session
+ * that used to refresh ONLY at project boot and per CMS-surface mount
+ * (`project-session.tsx`). A document authored or published after the last of
+ * those hydrations was invisible to every canvas resolver while the picker UIs
+ * (which read the live CMS store) showed it — the listing rendered its empty
+ * state against real published same-session content, and a `multiple` relation
+ * resolved 1-of-3 / 0-of-3 picked chips, all silently.
+ *
+ * This module closes the loop at the ONE write chokepoint the studio already
+ * has: the operations lifecycle event bus ("validate → authorize → mutate →
+ * emit"; its documented consumers include cache invalidation, vision AD-7 —
+ * the reference index and revalidation webhooks attach the same way). Every
+ * SUCCEEDED command in a content-bearing domain marks the session stale; a
+ * registered refresher (the project session's own `loadCms`, so both modes run
+ * the identical `loadHydratedCms` → `configureContentSession` path — no new
+ * loader, no transport bypass, no second cache) re-hydrates it, debounced so a
+ * persister burst coalesces into one load.
+ *
+ * Refreshes only run while a CONSUMER (a mounted canvas) is registered — a
+ * session with no preview surface just keeps the stale flag and re-hydrates
+ * when the next consumer arrives, so connected mode never pays a per-autosave
+ * query while nobody is previewing. The pure orchestrator
+ * ({@link createContentSessionSync}) takes its timer + refresh injected, so the
+ * coalescing/latch behaviour is unit-tested in node (house pattern); the
+ * module-level singleton below is the app wiring.
+ */
+/** Domains whose succeeded commands change what the preview engine serves. */
+export const CONTENT_SESSION_WRITE_DOMAINS = new Set([
+    'documents',
+    'schema',
+    'assets',
+]);
+/** Whether an operation event invalidates the preview content session. */
+export function isContentSessionWrite(event) {
+    return (event.kind === 'command' &&
+        event.status === 'succeeded' &&
+        CONTENT_SESSION_WRITE_DOMAINS.has(event.domain));
+}
+/**
+ * The pure orchestrator: stale flag + consumer count + one coalesced refresh.
+ *
+ * - `markStale` with no consumers only flags; the next `addConsumer` refreshes.
+ * - `markStale` with consumers schedules a trailing debounce (bursts coalesce).
+ * - A `markStale` DURING an in-flight refresh re-runs once after it settles —
+ *   the refresh that was already reading may have missed that write.
+ */
+export function createContentSessionSync(deps) {
+    const delayMs = deps.delayMs ?? 150;
+    const setTimer = deps.setTimer ?? ((fn, ms) => setTimeout(fn, ms));
+    const clearTimer = deps.clearTimer ?? ((handle) => clearTimeout(handle));
+    let stale = false;
+    let consumers = 0;
+    let timer = null;
+    let running = false;
+    let rerun = false;
+    function run() {
+        if (running) {
+            rerun = true;
+            return;
+        }
+        running = true;
+        stale = false;
+        void deps
+            .refresh()
+            .catch(() => {
+            // A failed hydration keeps the session stale so the next trigger retries;
+            // the loader itself already reports the failure loudly (loadCmsIntoSession).
+            stale = true;
+        })
+            .finally(() => {
+            running = false;
+            if (rerun || (stale && consumers > 0)) {
+                rerun = false;
+                schedule();
+            }
+        });
+    }
+    function schedule() {
+        if (timer !== null)
+            clearTimer(timer);
+        timer = setTimer(() => {
+            timer = null;
+            run();
+        }, delayMs);
+    }
+    return {
+        markStale() {
+            stale = true;
+            if (consumers > 0)
+                schedule();
+        },
+        addConsumer() {
+            consumers += 1;
+            if (stale && timer === null && !running)
+                schedule();
+            let released = false;
+            return () => {
+                if (released)
+                    return;
+                released = true;
+                consumers -= 1;
+            };
+        },
+        isStale() {
+            return stale;
+        },
+    };
+}
+let currentRefresher = null;
+const sync = createContentSessionSync({
+    refresh: () => currentRefresher?.() ?? Promise.resolve(),
+});
+/**
+ * Register the active project's session refresher (`ProjectSessionProvider`
+ * mounts it with its `loadCms`; leaving the project unregisters). Only one is
+ * active at a time — the studio shows one project per session.
+ */
+export function registerContentSessionRefresher(refresher) {
+    currentRefresher = refresher;
+    return () => {
+        if (currentRefresher === refresher)
+            currentRefresher = null;
+    };
+}
+/** Mark the shared session stale (the event-bus listener calls this). */
+export function markContentSessionStale() {
+    sync.markStale();
+}
+/** Register a mounted preview consumer (the canvas); returns the release. */
+export function acquireContentSessionConsumer() {
+    return sync.addConsumer();
+}
+//# sourceMappingURL=content-session-refresh.js.map

package/dist/lib/data/content-session-refresh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-session-refresh.js","sourceRoot":"","sources":["../../../src/lib/data/content-session-refresh.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,6BAA6B,GAAwB,IAAI,GAAG,CAAC;IACxE,WAAW;IACX,QAAQ;IACR,QAAQ;CACT,CAAC,CAAA;AAEF,0EAA0E;AAC1E,MAAM,UAAU,qBAAqB,CAAC,KAAqB;IACzD,OAAO,CACL,KAAK,CAAC,IAAI,KAAK,SAAS;QACxB,KAAK,CAAC,MAAM,KAAK,WAAW;QAC5B,6BAA6B,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAChD,CAAA;AACH,CAAC;AAqBD;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAA4B;IACnE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,GAAG,CAAA;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,EAAc,EAAE,EAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IACtF,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,MAAe,EAAE,EAAE,CAAC,YAAY,CAAC,MAAgB,CAAC,CAAC,CAAA;IAE3F,IAAI,KAAK,GAAG,KAAK,CAAA;IACjB,IAAI,SAAS,GAAG,CAAC,CAAA;IACjB,IAAI,KAAK,GAAY,IAAI,CAAA;IACzB,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,KAAK,GAAG,KAAK,CAAA;IAEjB,SAAS,GAAG;QACV,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,GAAG,IAAI,CAAA;YACZ,OAAM;QACR,CAAC;QACD,OAAO,GAAG,IAAI,CAAA;QACd,KAAK,GAAG,KAAK,CAAA;QACb,KAAK,IAAI;aACN,OAAO,EAAE;aACT,KAAK,CAAC,GAAG,EAAE;YACV,0EAA0E;YAC1E,6EAA6E;YAC7E,KAAK,GAAG,IAAI,CAAA;QACd,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,OAAO,GAAG,KAAK,CAAA;YACf,IAAI,KAAK,IAAI,CAAC,KAAK,IAAI,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;gBACtC,KAAK,GAAG,KAAK,CAAA;gBACb,QAAQ,EAAE,CAAA;YACZ,CAAC;QACH,CAAC,CAAC,CAAA;IACN,CAAC;IAED,SAAS,QAAQ;QACf,IAAI,KAAK,KAAK,IAAI;YAAE,UAAU,CAAC,KAAK,CAAC,CAAA;QACrC,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE;YACpB,KAAK,GAAG,IAAI,CAAA;YACZ,GAAG,EAAE,CAAA;QACP,CAAC,EAAE,OAAO,CAAC,CAAA;IACb,CAAC;IAED,OAAO;QACL,SAAS;YACP,KAAK,GAAG,IAAI,CAAA;YACZ,IAAI,SAAS,GAAG,CAAC;gBAAE,QAAQ,EAAE,CAAA;QAC/B,CAAC;QACD,WAAW;YACT,SAAS,IAAI,CAAC,CAAA;YACd,IAAI,KAAK,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO;gBAAE,QAAQ,EAAE,CAAA;YACnD,IAAI,QAAQ,GAAG,KAAK,CAAA;YACpB,OAAO,GAAG,EAAE;gBACV,IAAI,QAAQ;oBAAE,OAAM;gBACpB,QAAQ,GAAG,IAAI,CAAA;gBACf,SAAS,IAAI,CAAC,CAAA;YAChB,CAAC,CAAA;QACH,CAAC;QACD,OAAO;YACL,OAAO,KAAK,CAAA;QACd,CAAC;KACF,CAAA;AACH,CAAC;AAMD,IAAI,gBAAgB,GAAqB,IAAI,CAAA;AAE7C,MAAM,IAAI,GAAG,wBAAwB,CAAC;IACpC,OAAO,EAAE,GAAG,EAAE,CAAC,gBAAgB,EAAE,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE;CACzD,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAAC,SAAoB;IAClE,gBAAgB,GAAG,SAAS,CAAA;IAC5B,OAAO,GAAG,EAAE;QACV,IAAI,gBAAgB,KAAK,SAAS;YAAE,gBAAgB,GAAG,IAAI,CAAA;IAC7D,CAAC,CAAA;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,uBAAuB;IACrC,IAAI,CAAC,SAAS,EAAE,CAAA;AAClB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,6BAA6B;IAC3C,OAAO,IAAI,CAAC,WAAW,EAAE,CAAA;AAC3B,CAAC","sourcesContent":["import type { OperationEvent } from '@elytracms/studio/lib/operations'\n\n/**\n * Content-session write-sync (EC-460) — the root-cause fix for the playground\n * population family.\n *\n * The canvas preview engine (`collection-content.ts`) resolves listings,\n * relation picks, and rich-text links against a module-global content session\n * that used to refresh ONLY at project boot and per CMS-surface mount\n * (`project-session.tsx`). A document authored or published after the last of\n * those hydrations was invisible to every canvas resolver while the picker UIs\n * (which read the live CMS store) showed it — the listing rendered its empty\n * state against real published same-session content, and a `multiple` relation\n * resolved 1-of-3 / 0-of-3 picked chips, all silently.\n *\n * This module closes the loop at the ONE write chokepoint the studio already\n * has: the operations lifecycle event bus (\"validate → authorize → mutate →\n * emit\"; its documented consumers include cache invalidation, vision AD-7 —\n * the reference index and revalidation webhooks attach the same way). Every\n * SUCCEEDED command in a content-bearing domain marks the session stale; a\n * registered refresher (the project session's own `loadCms`, so both modes run\n * the identical `loadHydratedCms` → `configureContentSession` path — no new\n * loader, no transport bypass, no second cache) re-hydrates it, debounced so a\n * persister burst coalesces into one load.\n *\n * Refreshes only run while a CONSUMER (a mounted canvas) is registered — a\n * session with no preview surface just keeps the stale flag and re-hydrates\n * when the next consumer arrives, so connected mode never pays a per-autosave\n * query while nobody is previewing. The pure orchestrator\n * ({@link createContentSessionSync}) takes its timer + refresh injected, so the\n * coalescing/latch behaviour is unit-tested in node (house pattern); the\n * module-level singleton below is the app wiring.\n */\n\n/** Domains whose succeeded commands change what the preview engine serves. */\nexport const CONTENT_SESSION_WRITE_DOMAINS: ReadonlySet<string> = new Set([\n  'documents',\n  'schema',\n  'assets',\n])\n\n/** Whether an operation event invalidates the preview content session. */\nexport function isContentSessionWrite(event: OperationEvent): boolean {\n  return (\n    event.kind === 'command' &&\n    event.status === 'succeeded' &&\n    CONTENT_SESSION_WRITE_DOMAINS.has(event.domain)\n  )\n}\n\nexport interface ContentSessionSyncDeps {\n  /** Re-hydrate the session (the project session's `loadCms`). Never throws upward. */\n  refresh: () => Promise<unknown>\n  /** Trailing debounce for write bursts (ms). */\n  delayMs?: number\n  /** Injectable timer pair (tests drive time manually). */\n  setTimer?: (fn: () => void, ms: number) => unknown\n  clearTimer?: (handle: unknown) => void\n}\n\nexport interface ContentSessionSync {\n  /** A content-bearing write succeeded — refresh (debounced) if anyone previews. */\n  markStale(): void\n  /** A preview surface mounted; returns its release. A stale session refreshes now. */\n  addConsumer(): () => void\n  /** Whether a refresh is currently owed (test/introspection seam). */\n  isStale(): boolean\n}\n\n/**\n * The pure orchestrator: stale flag + consumer count + one coalesced refresh.\n *\n * - `markStale` with no consumers only flags; the next `addConsumer` refreshes.\n * - `markStale` with consumers schedules a trailing debounce (bursts coalesce).\n * - A `markStale` DURING an in-flight refresh re-runs once after it settles —\n *   the refresh that was already reading may have missed that write.\n */\nexport function createContentSessionSync(deps: ContentSessionSyncDeps): ContentSessionSync {\n  const delayMs = deps.delayMs ?? 150\n  const setTimer = deps.setTimer ?? ((fn: () => void, ms: number) => setTimeout(fn, ms))\n  const clearTimer = deps.clearTimer ?? ((handle: unknown) => clearTimeout(handle as number))\n\n  let stale = false\n  let consumers = 0\n  let timer: unknown = null\n  let running = false\n  let rerun = false\n\n  function run(): void {\n    if (running) {\n      rerun = true\n      return\n    }\n    running = true\n    stale = false\n    void deps\n      .refresh()\n      .catch(() => {\n        // A failed hydration keeps the session stale so the next trigger retries;\n        // the loader itself already reports the failure loudly (loadCmsIntoSession).\n        stale = true\n      })\n      .finally(() => {\n        running = false\n        if (rerun || (stale && consumers > 0)) {\n          rerun = false\n          schedule()\n        }\n      })\n  }\n\n  function schedule(): void {\n    if (timer !== null) clearTimer(timer)\n    timer = setTimer(() => {\n      timer = null\n      run()\n    }, delayMs)\n  }\n\n  return {\n    markStale() {\n      stale = true\n      if (consumers > 0) schedule()\n    },\n    addConsumer() {\n      consumers += 1\n      if (stale && timer === null && !running) schedule()\n      let released = false\n      return () => {\n        if (released) return\n        released = true\n        consumers -= 1\n      }\n    },\n    isStale() {\n      return stale\n    },\n  }\n}\n\n// --- App wiring (module singleton) -------------------------------------------------\n\ntype Refresher = () => Promise<unknown>\n\nlet currentRefresher: Refresher | null = null\n\nconst sync = createContentSessionSync({\n  refresh: () => currentRefresher?.() ?? Promise.resolve(),\n})\n\n/**\n * Register the active project's session refresher (`ProjectSessionProvider`\n * mounts it with its `loadCms`; leaving the project unregisters). Only one is\n * active at a time — the studio shows one project per session.\n */\nexport function registerContentSessionRefresher(refresher: Refresher): () => void {\n  currentRefresher = refresher\n  return () => {\n    if (currentRefresher === refresher) currentRefresher = null\n  }\n}\n\n/** Mark the shared session stale (the event-bus listener calls this). */\nexport function markContentSessionStale(): void {\n  sync.markStale()\n}\n\n/** Register a mounted preview consumer (the canvas); returns the release. */\nexport function acquireContentSessionConsumer(): () => void {\n  return sync.addConsumer()\n}\n"]}

package/dist/lib/data/index.d.ts

@@ -2,3 +2,5 @@ export * from './data-store.js';
 export * from './sample-capture.js';
 export * from './sources-store.js';
 export * from './collection-content.js';
+export * from './content-session-refresh.js';
+export * from './playground-unload-guard.js';

package/dist/lib/data/index.js

@@ -2,6 +2,8 @@ export * from './data-store.js';
 export * from './sample-capture.js';
 export * from './sources-store.js';
 export * from './collection-content.js';
+export * from './content-session-refresh.js';
+export * from './playground-unload-guard.js';
 // Data providers (EC-167) are imported from './providers' directly: the module
 // exports a `DataProvider` domain type that would collide with the store's
 // `<DataProvider>` React provider in a wildcard barrel.

package/dist/lib/data/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/data/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAA;AAC5B,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,sBAAsB,CAAA;AACpC,+EAA+E;AAC/E,2EAA2E;AAC3E,wDAAwD","sourcesContent":["export * from './data-store'\nexport * from './sample-capture'\nexport * from './sources-store'\nexport * from './collection-content'\n// Data providers (EC-167) are imported from './providers' directly: the module\n// exports a `DataProvider` domain type that would collide with the store's\n// `<DataProvider>` React provider in a wildcard barrel.\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/data/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAA;AAC5B,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,sBAAsB,CAAA;AACpC,cAAc,2BAA2B,CAAA;AACzC,cAAc,2BAA2B,CAAA;AACzC,+EAA+E;AAC/E,2EAA2E;AAC3E,wDAAwD","sourcesContent":["export * from './data-store'\nexport * from './sample-capture'\nexport * from './sources-store'\nexport * from './collection-content'\nexport * from './content-session-refresh'\nexport * from './playground-unload-guard'\n// Data providers (EC-167) are imported from './providers' directly: the module\n// exports a `DataProvider` domain type that would collide with the store's\n// `<DataProvider>` React provider in a wildcard barrel.\n"]}