@elytracms/studio 0.0.80 → 0.0.82

package/dist/components/cms/cell-edit.d.ts

@@ -1,4 +1,4 @@
-import type { CmsDocument, CmsValidationIssue, CollectionDef, CollectionRegistry, FieldDef, Locale, LocaleConfig } from '@elytracms/core/cms-core';
+import type { CmsDocument, CmsValidationIssue, CollectionDef, CollectionRegistry, DocumentRef, FieldDef, Locale, LocaleConfig } from '@elytracms/core/cms-core';
 import type { OperationError, OperationResult } from '@elytracms/studio/lib/operations';
 /**
  * Inline cell editing for the collection table (EC-168) — the pure half.
@@ -42,8 +42,14 @@ export declare function applyCellValue(collection: CollectionDef, doc: CmsDocume
  * Error-severity issues that the edited cell itself caused. Localized fields
  * only reject on issues for the edited locale — a missing translation in some
  * *other* locale must not block this commit.
+ *
+ * EC-497: validates with THE bag (`gateValidateOptions`), not the `store` +
+ * `localeConfig` subset it used to assemble here. A cell edit is not a weaker
+ * KIND of validation — it is the same validation, FILTERED to the cell being
+ * committed, which is the whole option-set contract in one function: surfaces
+ * differ in what they do with the issues, never in what they validated with.
  */
-export declare function cellEditIssues(registry: CollectionRegistry, documents: readonly CmsDocument[], localeConfig: LocaleConfig, collection: CollectionDef, next: CmsDocument, fieldName: string, locale: Locale): CmsValidationIssue[];
+export declare function cellEditIssues(registry: CollectionRegistry, documents: readonly CmsDocument[], localeConfig: LocaleConfig, collection: CollectionDef, next: CmsDocument, fieldName: string, locale: Locale, oracles?: CellEditOracles): CmsValidationIssue[];
 /** Outcome of one cell commit: the new document, or a structured rejection. */
 export type CellCommitOutcome = {
     ok: true;
@@ -62,7 +68,16 @@ export interface CellCommitInput {
     /** The committed draft value (`undefined` clears the field). */
     value: unknown;
 }
-export interface CellCommitContext {
+/**
+ * The session oracles the canonical option bag needs beyond the store + locales
+ * (EC-497). Optional so a fixture-only caller still gets the rest of the bag;
+ * absent `isPublished` means "nothing is published", the engine's own default.
+ */
+export interface CellEditOracles {
+    isPublished?: (ref: DocumentRef) => boolean;
+    assetExists?: (id: string) => boolean;
+}
+export interface CellCommitContext extends CellEditOracles {
     registry: CollectionRegistry;
     /** Current session documents (relation/asset target resolution). */
     documents: readonly CmsDocument[];

package/dist/components/cms/cell-edit.js

@@ -1,5 +1,7 @@
 import { createDocumentStore, isFieldLocalized, validateDocument } from '@elytracms/core/cms-core';
+import { gateValidateOptions } from './gate-validation.js';
 import { replaceDoc } from './document-ref-utils.js';
+import { cmsValidationIssueMessage, operationErrorMessage, operationIssueMessage, } from '@elytracms/studio/lib/persona/labels';
 /** Stable key for a cell (state maps, DOM lookups). */
 export function cellKey(coord) {
     return `${coord.docId}::${coord.field}`;
@@ -70,12 +72,23 @@ export function applyCellValue(collection, doc, fieldName, locale, value) {
  * Error-severity issues that the edited cell itself caused. Localized fields
  * only reject on issues for the edited locale — a missing translation in some
  * *other* locale must not block this commit.
+ *
+ * EC-497: validates with THE bag (`gateValidateOptions`), not the `store` +
+ * `localeConfig` subset it used to assemble here. A cell edit is not a weaker
+ * KIND of validation — it is the same validation, FILTERED to the cell being
+ * committed, which is the whole option-set contract in one function: surfaces
+ * differ in what they do with the issues, never in what they validated with.
  */
-export function cellEditIssues(registry, documents, localeConfig, collection, next, fieldName, locale) {
+export function cellEditIssues(registry, documents, localeConfig, collection, next, fieldName, locale, oracles = {}) {
     // Validate against the session with the edited document swapped in, so
     // self-relations and same-document targets resolve.
     const store = createDocumentStore(replaceDoc(documents, next));
-    const issues = validateDocument(registry, next, { store, localeConfig });
+    const issues = validateDocument(registry, next, gateValidateOptions({
+        store,
+        localeConfig,
+        isPublished: oracles.isPublished ?? (() => false),
+        ...(oracles.assetExists ? { assetExists: oracles.assetExists } : {}),
+    }));
     const localized = isFieldLocalized(collection, fieldName);
     return issues.filter((issue) => {
         if (issue.severity !== 'error')
@@ -99,16 +112,22 @@ export function cellEditIssues(registry, documents, localeConfig, collection, ne
  */
 export async function commitCellEdit(context, input) {
     const next = applyCellValue(input.collection, input.doc, input.field.name, input.locale, input.value);
-    const issues = cellEditIssues(context.registry, context.documents, context.localeConfig, input.collection, next, input.field.name, input.locale);
+    const issues = cellEditIssues(context.registry, context.documents, context.localeConfig, input.collection, next, input.field.name, input.locale, {
+        ...(context.isPublished ? { isPublished: context.isPublished } : {}),
+        ...(context.assetExists ? { assetExists: context.assetExists } : {}),
+    });
     if (issues.length > 0) {
         return {
             ok: false,
             error: {
                 code: 'validation',
-                message: issues[0].message,
+                // EC-487/EC-494: this producer is CLIENT-side and already holds the structured
+                // issue, so it resolves the message here. (Since EC-494 the wire also carries
+                // the ref, which is what makes the SERVER-side publish gate localize.)
+                message: cmsValidationIssueMessage(issues[0]),
                 issues: issues.map((issue) => ({
                     code: issue.code,
-                    message: issue.message,
+                    message: cmsValidationIssueMessage(issue),
                     path: [...issue.path],
                     domain: 'cms',
                 })),
@@ -138,8 +157,11 @@ export async function commitCellEdit(context, input) {
 }
 /** The message the cell renders for a rejection: the first issue beats the envelope. */
 export function cellErrorMessage(error) {
+    // EC-494: an OperationIssue now carries its catalog ref across the wire, so a
+    // rejection built SERVER-SIDE (the publish gate) localizes here too — not only the
+    // studio-built ones above.
     if (error.code === 'validation' && error.issues.length > 0)
-        return error.issues[0].message;
-    return error.message;
+        return operationIssueMessage(error.issues[0]);
+    return operationErrorMessage(error);
 }
 //# sourceMappingURL=cell-edit.js.map

package/dist/components/cms/cell-edit.js.map

@@ -1 +1 @@
-{"version":3,"file":"cell-edit.js","sourceRoot":"","sources":["../../../src/components/cms/cell-edit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAWlG,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAoBjD,uDAAuD;AACvD,MAAM,UAAU,OAAO,CAAC,KAAgB;IACtC,OAAO,GAAG,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAAE,CAAA;AACzC,CAAC;AAOD,MAAM,YAAY,GAAkC,IAAI,GAAG,CAAC;IAC1D,MAAM;IACN,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,MAAM;CACP,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAe,EAAE,QAAiB;IAC7D,IAAI,QAAQ;QAAE,OAAO,MAAM,CAAA;IAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAA;IACxE,OAAO,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAA;AACzD,CAAC;AAOD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAyB,EACzB,MAAyB,EACzB,OAAkB,EAClB,SAA2B;IAE3B,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACzC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACzC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC1D,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;QAC/B,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAA;IAChF,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxE,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAClE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAE,CAAA;IACvD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAE,EAAE,CAAA;AACxD,CAAC;AAED,kFAAkF;AAElF;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,UAAyB,EACzB,GAAgB,EAChB,SAAiB,EACjB,MAAc,EACd,KAAc;IAEd,IAAI,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAA;QACxD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC,SAAS,CAAC,CAAA;;YAC/C,SAAS,CAAC,SAAS,CAAC,GAAG,KAAK,CAAA;QACjC,OAAO,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,CAAA;IACzE,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,CAAA;IAChC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAA;;QAC5C,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAA;IAC9B,OAAO,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,CAAA;AAC3B,CAAC;AAED,kFAAkF;AAElF;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,QAA4B,EAC5B,SAAiC,EACjC,YAA0B,EAC1B,UAAyB,EACzB,IAAiB,EACjB,SAAiB,EACjB,MAAc;IAEd,uEAAuE;IACvE,oDAAoD;IACpD,MAAM,KAAK,GAAG,mBAAmB,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAA;IAC9D,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAA;IACxE,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IACzD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QAC7B,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,KAAK,CAAA;QAC5C,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;QACjD,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAA;QAC3B,mFAAmF;QACnF,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAC1C,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,MAAM,CAAA;IAChD,CAAC,CAAC,CAAA;AACJ,CAAC;AAqCD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAA0B,EAC1B,KAAsB;IAEtB,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IAErG,MAAM,MAAM,GAAG,cAAc,CAC3B,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,YAAY,EACpB,KAAK,CAAC,UAAU,EAChB,IAAI,EACJ,KAAK,CAAC,KAAK,CAAC,IAAI,EAChB,KAAK,CAAC,MAAM,CACb,CAAA;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC,OAAO;gBAC3B,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBAC7B,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC;oBACrB,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;aACJ;SACF,CAAA;IACH,CAAC;IAED,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IAC1B,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,IAAI,MAAgC,CAAA;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wEAAwE;YACxE,4DAA4D;YAC5D,MAAM,GAAG;gBACP,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;aAC5F,CAAA;QACH,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAA;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAA;AAChC,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,gBAAgB,CAAC,KAAqB;IACpD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,OAAO,CAAA;IAC3F,OAAO,KAAK,CAAC,OAAO,CAAA;AACtB,CAAC","sourcesContent":["import { createDocumentStore, isFieldLocalized, validateDocument } from '@elytracms/core/cms-core'\nimport type {\n  CmsDocument,\n  CmsValidationIssue,\n  CollectionDef,\n  CollectionRegistry,\n  FieldDef,\n  Locale,\n  LocaleConfig,\n} from '@elytracms/core/cms-core'\nimport type { OperationError, OperationResult } from '@elytracms/studio/lib/operations'\nimport { replaceDoc } from './document-ref-utils'\n\n/**\n * Inline cell editing for the collection table (EC-168) — the pure half.\n *\n * Everything here is plain data + functions so the cell-edit state machine is\n * testable without a DOM: which cells are editable, how Tab/Enter advance,\n * how a draft value is folded into a document (active locale only), and how a\n * commit flows through exactly one `documents.upsert` operations command with\n * optimistic apply + rollback on rejection.\n */\n\n// --- Cell identity -----------------------------------------------------------\n\n/** A cell in the collection table: one document × one field column. */\nexport interface CellCoord {\n  docId: string\n  field: string\n}\n\n/** Stable key for a cell (state maps, DOM lookups). */\nexport function cellKey(coord: CellCoord): string {\n  return `${coord.docId}::${coord.field}`\n}\n\n// --- Editability -------------------------------------------------------------\n\n/** How a cell edits: inline control, anchored picker dialog, or not at all. */\nexport type CellEditKind = 'inline' | 'picker' | 'none'\n\nconst INLINE_TYPES: ReadonlySet<FieldDef['type']> = new Set([\n  'text',\n  'number',\n  'boolean',\n  'select',\n  'date',\n])\n\n/**\n * Classify a field's in-table editing surface. Rich text is deliberately not\n * inline-editable (the detail editor owns it); read-only fields never edit.\n */\nexport function cellEditKind(field: FieldDef, readOnly: boolean): CellEditKind {\n  if (readOnly) return 'none'\n  if (field.type === 'relation' || field.type === 'asset') return 'picker'\n  return INLINE_TYPES.has(field.type) ? 'inline' : 'none'\n}\n\n// --- Keyboard advance --------------------------------------------------------\n\n/** Where a committed edit moves next: Tab → next, Shift-Tab → prev, Enter → down. */\nexport type AdvanceDirection = 'next' | 'prev' | 'down'\n\n/**\n * The next editable cell in the table grid, or `null` at a boundary.\n * `docIds` is the rendered row order; `fields` the editable column order.\n * 'next'/'prev' walk row-major (wrapping across rows); 'down' stays in the\n * same column.\n */\nexport function nextEditableCell(\n  docIds: readonly string[],\n  fields: readonly string[],\n  current: CellCoord,\n  direction: AdvanceDirection,\n): CellCoord | null {\n  const row = docIds.indexOf(current.docId)\n  const col = fields.indexOf(current.field)\n  if (row < 0 || col < 0 || fields.length === 0) return null\n  if (direction === 'down') {\n    const nextDoc = docIds[row + 1]\n    return nextDoc === undefined ? null : { docId: nextDoc, field: current.field }\n  }\n  const flat = row * fields.length + col + (direction === 'next' ? 1 : -1)\n  if (flat < 0 || flat >= docIds.length * fields.length) return null\n  const docId = docIds[Math.floor(flat / fields.length)]!\n  return { docId, field: fields[flat % fields.length]! }\n}\n\n// --- Applying a draft value ----------------------------------------------------\n\n/**\n * Fold one field value into a document. Localized fields write ONLY the given\n * locale's bag (other locale variants untouched, EC-018); non-localized fields\n * write the shared `values` bag. `undefined` clears the entry.\n */\nexport function applyCellValue(\n  collection: CollectionDef,\n  doc: CmsDocument,\n  fieldName: string,\n  locale: Locale,\n  value: unknown,\n): CmsDocument {\n  if (isFieldLocalized(collection, fieldName)) {\n    const perLocale = { ...(doc.localized?.[locale] ?? {}) }\n    if (value === undefined) delete perLocale[fieldName]\n    else perLocale[fieldName] = value\n    return { ...doc, localized: { ...doc.localized, [locale]: perLocale } }\n  }\n  const values = { ...doc.values }\n  if (value === undefined) delete values[fieldName]\n  else values[fieldName] = value\n  return { ...doc, values }\n}\n\n// --- Validation gate -----------------------------------------------------------\n\n/**\n * Error-severity issues that the edited cell itself caused. Localized fields\n * only reject on issues for the edited locale — a missing translation in some\n * *other* locale must not block this commit.\n */\nexport function cellEditIssues(\n  registry: CollectionRegistry,\n  documents: readonly CmsDocument[],\n  localeConfig: LocaleConfig,\n  collection: CollectionDef,\n  next: CmsDocument,\n  fieldName: string,\n  locale: Locale,\n): CmsValidationIssue[] {\n  // Validate against the session with the edited document swapped in, so\n  // self-relations and same-document targets resolve.\n  const store = createDocumentStore(replaceDoc(documents, next))\n  const issues = validateDocument(registry, next, { store, localeConfig })\n  const localized = isFieldLocalized(collection, fieldName)\n  return issues.filter((issue) => {\n    if (issue.severity !== 'error') return false\n    if (issue.meta?.field !== fieldName) return false\n    if (!localized) return true\n    // Localized field paths are ['documents', key, 'localized', <locale>, <field>, …].\n    const at = issue.path.indexOf('localized')\n    return at < 0 || issue.path[at + 1] === locale\n  })\n}\n\n// --- Commit pipeline -------------------------------------------------------------\n\n/** Outcome of one cell commit: the new document, or a structured rejection. */\nexport type CellCommitOutcome =\n  | { ok: true; doc: CmsDocument }\n  | { ok: false; error: OperationError }\n\nexport interface CellCommitInput {\n  collection: CollectionDef\n  /** The document as currently rendered (the rollback target). */\n  doc: CmsDocument\n  field: FieldDef\n  /** The active locale at the point of edit (table locale resolution). */\n  locale: Locale\n  /** The committed draft value (`undefined` clears the field). */\n  value: unknown\n}\n\nexport interface CellCommitContext {\n  registry: CollectionRegistry\n  /** Current session documents (relation/asset target resolution). */\n  documents: readonly CmsDocument[]\n  localeConfig: LocaleConfig\n  /** Optimistically apply the edited document to the session. */\n  applySession: (next: CmsDocument) => void\n  /** Restore the pre-edit document after a rejected dispatch. */\n  rollbackSession: (previous: CmsDocument) => void\n  /**\n   * Dispatch the ONE operations command for this commit\n   * (`documents.upsert`, EC-141). Absent in fixture-only sessions\n   * (no project scope) — the commit is session-only then.\n   */\n  dispatch?: (next: CmsDocument) => Promise<OperationResult<unknown>>\n}\n\n/**\n * Commit one cell edit:\n * 1. fold the value into the document (active locale only),\n * 2. gate on field validation — rejected edits dispatch NOTHING and report a\n *    structured validation error for the cell,\n * 3. apply optimistically, dispatch exactly one operations command,\n * 4. roll the session back when the operation result is a rejection.\n */\nexport async function commitCellEdit(\n  context: CellCommitContext,\n  input: CellCommitInput,\n): Promise<CellCommitOutcome> {\n  const next = applyCellValue(input.collection, input.doc, input.field.name, input.locale, input.value)\n\n  const issues = cellEditIssues(\n    context.registry,\n    context.documents,\n    context.localeConfig,\n    input.collection,\n    next,\n    input.field.name,\n    input.locale,\n  )\n  if (issues.length > 0) {\n    return {\n      ok: false,\n      error: {\n        code: 'validation',\n        message: issues[0]!.message,\n        issues: issues.map((issue) => ({\n          code: issue.code,\n          message: issue.message,\n          path: [...issue.path],\n          domain: 'cms',\n        })),\n      },\n    }\n  }\n\n  context.applySession(next)\n  if (context.dispatch) {\n    let result: OperationResult<unknown>\n    try {\n      result = await context.dispatch(next)\n    } catch (cause) {\n      // Operations never throw by contract; treat a broken transport the same\n      // as a failed command so the cell still rolls back visibly.\n      result = {\n        ok: false,\n        error: { code: 'unknown', message: cause instanceof Error ? cause.message : String(cause) },\n      }\n    }\n    if (!result.ok) {\n      context.rollbackSession(input.doc)\n      return { ok: false, error: result.error }\n    }\n  }\n  return { ok: true, doc: next }\n}\n\n/** The message the cell renders for a rejection: the first issue beats the envelope. */\nexport function cellErrorMessage(error: OperationError): string {\n  if (error.code === 'validation' && error.issues.length > 0) return error.issues[0]!.message\n  return error.message\n}\n"]}
+{"version":3,"file":"cell-edit.js","sourceRoot":"","sources":["../../../src/components/cms/cell-edit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAWlG,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAEvD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjD,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,sCAAsC,CAAA;AAoB7C,uDAAuD;AACvD,MAAM,UAAU,OAAO,CAAC,KAAgB;IACtC,OAAO,GAAG,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAAE,CAAA;AACzC,CAAC;AAOD,MAAM,YAAY,GAAkC,IAAI,GAAG,CAAC;IAC1D,MAAM;IACN,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,MAAM;CACP,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAe,EAAE,QAAiB;IAC7D,IAAI,QAAQ;QAAE,OAAO,MAAM,CAAA;IAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAA;IACxE,OAAO,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAA;AACzD,CAAC;AAOD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAyB,EACzB,MAAyB,EACzB,OAAkB,EAClB,SAA2B;IAE3B,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACzC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACzC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC1D,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;QAC/B,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAA;IAChF,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxE,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAClE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAE,CAAA;IACvD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAE,EAAE,CAAA;AACxD,CAAC;AAED,kFAAkF;AAElF;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,UAAyB,EACzB,GAAgB,EAChB,SAAiB,EACjB,MAAc,EACd,KAAc;IAEd,IAAI,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAA;QACxD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC,SAAS,CAAC,CAAA;;YAC/C,SAAS,CAAC,SAAS,CAAC,GAAG,KAAK,CAAA;QACjC,OAAO,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,CAAA;IACzE,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,CAAA;IAChC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAA;;QAC5C,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAA;IAC9B,OAAO,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,CAAA;AAC3B,CAAC;AAED,kFAAkF;AAElF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAC5B,QAA4B,EAC5B,SAAiC,EACjC,YAA0B,EAC1B,UAAyB,EACzB,IAAiB,EACjB,SAAiB,EACjB,MAAc,EACd,UAA2B,EAAE;IAE7B,uEAAuE;IACvE,oDAAoD;IACpD,MAAM,KAAK,GAAG,mBAAmB,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAA;IAC9D,MAAM,MAAM,GAAG,gBAAgB,CAC7B,QAAQ,EACR,IAAI,EACJ,mBAAmB,CAAC;QAClB,KAAK;QACL,YAAY;QACZ,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;QACjD,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC,CACH,CAAA;IACD,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IACzD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QAC7B,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,KAAK,CAAA;QAC5C,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;QACjD,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAA;QAC3B,mFAAmF;QACnF,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAC1C,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,MAAM,CAAA;IAChD,CAAC,CAAC,CAAA;AACJ,CAAC;AA+CD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAA0B,EAC1B,KAAsB;IAEtB,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IAErG,MAAM,MAAM,GAAG,cAAc,CAC3B,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,YAAY,EACpB,KAAK,CAAC,UAAU,EAChB,IAAI,EACJ,KAAK,CAAC,KAAK,CAAC,IAAI,EAChB,KAAK,CAAC,MAAM,EACZ;QACE,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CACF,CAAA;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,YAAY;gBAClB,+EAA+E;gBAC/E,8EAA8E;gBAC9E,uEAAuE;gBACvE,OAAO,EAAE,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;gBAC9C,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBAC7B,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,yBAAyB,CAAC,KAAK,CAAC;oBACzC,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC;oBACrB,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;aACJ;SACF,CAAA;IACH,CAAC;IAED,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IAC1B,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,IAAI,MAAgC,CAAA;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wEAAwE;YACxE,4DAA4D;YAC5D,MAAM,GAAG;gBACP,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;aAC5F,CAAA;QACH,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAA;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAA;AAChC,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,gBAAgB,CAAC,KAAqB;IACpD,8EAA8E;IAC9E,mFAAmF;IACnF,2BAA2B;IAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QACxD,OAAO,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAA;IAChD,OAAO,qBAAqB,CAAC,KAAK,CAAC,CAAA;AACrC,CAAC","sourcesContent":["import { createDocumentStore, isFieldLocalized, validateDocument } from '@elytracms/core/cms-core'\nimport type {\n  CmsDocument,\n  CmsValidationIssue,\n  CollectionDef,\n  CollectionRegistry,\n  DocumentRef,\n  FieldDef,\n  Locale,\n  LocaleConfig,\n} from '@elytracms/core/cms-core'\nimport { gateValidateOptions } from './gate-validation'\nimport type { OperationError, OperationResult } from '@elytracms/studio/lib/operations'\nimport { replaceDoc } from './document-ref-utils'\nimport {\n  cmsValidationIssueMessage,\n  operationErrorMessage,\n  operationIssueMessage,\n} from '@elytracms/studio/lib/persona/labels'\n\n/**\n * Inline cell editing for the collection table (EC-168) — the pure half.\n *\n * Everything here is plain data + functions so the cell-edit state machine is\n * testable without a DOM: which cells are editable, how Tab/Enter advance,\n * how a draft value is folded into a document (active locale only), and how a\n * commit flows through exactly one `documents.upsert` operations command with\n * optimistic apply + rollback on rejection.\n */\n\n// --- Cell identity -----------------------------------------------------------\n\n/** A cell in the collection table: one document × one field column. */\nexport interface CellCoord {\n  docId: string\n  field: string\n}\n\n/** Stable key for a cell (state maps, DOM lookups). */\nexport function cellKey(coord: CellCoord): string {\n  return `${coord.docId}::${coord.field}`\n}\n\n// --- Editability -------------------------------------------------------------\n\n/** How a cell edits: inline control, anchored picker dialog, or not at all. */\nexport type CellEditKind = 'inline' | 'picker' | 'none'\n\nconst INLINE_TYPES: ReadonlySet<FieldDef['type']> = new Set([\n  'text',\n  'number',\n  'boolean',\n  'select',\n  'date',\n])\n\n/**\n * Classify a field's in-table editing surface. Rich text is deliberately not\n * inline-editable (the detail editor owns it); read-only fields never edit.\n */\nexport function cellEditKind(field: FieldDef, readOnly: boolean): CellEditKind {\n  if (readOnly) return 'none'\n  if (field.type === 'relation' || field.type === 'asset') return 'picker'\n  return INLINE_TYPES.has(field.type) ? 'inline' : 'none'\n}\n\n// --- Keyboard advance --------------------------------------------------------\n\n/** Where a committed edit moves next: Tab → next, Shift-Tab → prev, Enter → down. */\nexport type AdvanceDirection = 'next' | 'prev' | 'down'\n\n/**\n * The next editable cell in the table grid, or `null` at a boundary.\n * `docIds` is the rendered row order; `fields` the editable column order.\n * 'next'/'prev' walk row-major (wrapping across rows); 'down' stays in the\n * same column.\n */\nexport function nextEditableCell(\n  docIds: readonly string[],\n  fields: readonly string[],\n  current: CellCoord,\n  direction: AdvanceDirection,\n): CellCoord | null {\n  const row = docIds.indexOf(current.docId)\n  const col = fields.indexOf(current.field)\n  if (row < 0 || col < 0 || fields.length === 0) return null\n  if (direction === 'down') {\n    const nextDoc = docIds[row + 1]\n    return nextDoc === undefined ? null : { docId: nextDoc, field: current.field }\n  }\n  const flat = row * fields.length + col + (direction === 'next' ? 1 : -1)\n  if (flat < 0 || flat >= docIds.length * fields.length) return null\n  const docId = docIds[Math.floor(flat / fields.length)]!\n  return { docId, field: fields[flat % fields.length]! }\n}\n\n// --- Applying a draft value ----------------------------------------------------\n\n/**\n * Fold one field value into a document. Localized fields write ONLY the given\n * locale's bag (other locale variants untouched, EC-018); non-localized fields\n * write the shared `values` bag. `undefined` clears the entry.\n */\nexport function applyCellValue(\n  collection: CollectionDef,\n  doc: CmsDocument,\n  fieldName: string,\n  locale: Locale,\n  value: unknown,\n): CmsDocument {\n  if (isFieldLocalized(collection, fieldName)) {\n    const perLocale = { ...(doc.localized?.[locale] ?? {}) }\n    if (value === undefined) delete perLocale[fieldName]\n    else perLocale[fieldName] = value\n    return { ...doc, localized: { ...doc.localized, [locale]: perLocale } }\n  }\n  const values = { ...doc.values }\n  if (value === undefined) delete values[fieldName]\n  else values[fieldName] = value\n  return { ...doc, values }\n}\n\n// --- Validation gate -----------------------------------------------------------\n\n/**\n * Error-severity issues that the edited cell itself caused. Localized fields\n * only reject on issues for the edited locale — a missing translation in some\n * *other* locale must not block this commit.\n *\n * EC-497: validates with THE bag (`gateValidateOptions`), not the `store` +\n * `localeConfig` subset it used to assemble here. A cell edit is not a weaker\n * KIND of validation — it is the same validation, FILTERED to the cell being\n * committed, which is the whole option-set contract in one function: surfaces\n * differ in what they do with the issues, never in what they validated with.\n */\nexport function cellEditIssues(\n  registry: CollectionRegistry,\n  documents: readonly CmsDocument[],\n  localeConfig: LocaleConfig,\n  collection: CollectionDef,\n  next: CmsDocument,\n  fieldName: string,\n  locale: Locale,\n  oracles: CellEditOracles = {},\n): CmsValidationIssue[] {\n  // Validate against the session with the edited document swapped in, so\n  // self-relations and same-document targets resolve.\n  const store = createDocumentStore(replaceDoc(documents, next))\n  const issues = validateDocument(\n    registry,\n    next,\n    gateValidateOptions({\n      store,\n      localeConfig,\n      isPublished: oracles.isPublished ?? (() => false),\n      ...(oracles.assetExists ? { assetExists: oracles.assetExists } : {}),\n    }),\n  )\n  const localized = isFieldLocalized(collection, fieldName)\n  return issues.filter((issue) => {\n    if (issue.severity !== 'error') return false\n    if (issue.meta?.field !== fieldName) return false\n    if (!localized) return true\n    // Localized field paths are ['documents', key, 'localized', <locale>, <field>, …].\n    const at = issue.path.indexOf('localized')\n    return at < 0 || issue.path[at + 1] === locale\n  })\n}\n\n// --- Commit pipeline -------------------------------------------------------------\n\n/** Outcome of one cell commit: the new document, or a structured rejection. */\nexport type CellCommitOutcome =\n  | { ok: true; doc: CmsDocument }\n  | { ok: false; error: OperationError }\n\nexport interface CellCommitInput {\n  collection: CollectionDef\n  /** The document as currently rendered (the rollback target). */\n  doc: CmsDocument\n  field: FieldDef\n  /** The active locale at the point of edit (table locale resolution). */\n  locale: Locale\n  /** The committed draft value (`undefined` clears the field). */\n  value: unknown\n}\n\n/**\n * The session oracles the canonical option bag needs beyond the store + locales\n * (EC-497). Optional so a fixture-only caller still gets the rest of the bag;\n * absent `isPublished` means \"nothing is published\", the engine's own default.\n */\nexport interface CellEditOracles {\n  isPublished?: (ref: DocumentRef) => boolean\n  assetExists?: (id: string) => boolean\n}\n\nexport interface CellCommitContext extends CellEditOracles {\n  registry: CollectionRegistry\n  /** Current session documents (relation/asset target resolution). */\n  documents: readonly CmsDocument[]\n  localeConfig: LocaleConfig\n  /** Optimistically apply the edited document to the session. */\n  applySession: (next: CmsDocument) => void\n  /** Restore the pre-edit document after a rejected dispatch. */\n  rollbackSession: (previous: CmsDocument) => void\n  /**\n   * Dispatch the ONE operations command for this commit\n   * (`documents.upsert`, EC-141). Absent in fixture-only sessions\n   * (no project scope) — the commit is session-only then.\n   */\n  dispatch?: (next: CmsDocument) => Promise<OperationResult<unknown>>\n}\n\n/**\n * Commit one cell edit:\n * 1. fold the value into the document (active locale only),\n * 2. gate on field validation — rejected edits dispatch NOTHING and report a\n *    structured validation error for the cell,\n * 3. apply optimistically, dispatch exactly one operations command,\n * 4. roll the session back when the operation result is a rejection.\n */\nexport async function commitCellEdit(\n  context: CellCommitContext,\n  input: CellCommitInput,\n): Promise<CellCommitOutcome> {\n  const next = applyCellValue(input.collection, input.doc, input.field.name, input.locale, input.value)\n\n  const issues = cellEditIssues(\n    context.registry,\n    context.documents,\n    context.localeConfig,\n    input.collection,\n    next,\n    input.field.name,\n    input.locale,\n    {\n      ...(context.isPublished ? { isPublished: context.isPublished } : {}),\n      ...(context.assetExists ? { assetExists: context.assetExists } : {}),\n    },\n  )\n  if (issues.length > 0) {\n    return {\n      ok: false,\n      error: {\n        code: 'validation',\n        // EC-487/EC-494: this producer is CLIENT-side and already holds the structured\n        // issue, so it resolves the message here. (Since EC-494 the wire also carries\n        // the ref, which is what makes the SERVER-side publish gate localize.)\n        message: cmsValidationIssueMessage(issues[0]!),\n        issues: issues.map((issue) => ({\n          code: issue.code,\n          message: cmsValidationIssueMessage(issue),\n          path: [...issue.path],\n          domain: 'cms',\n        })),\n      },\n    }\n  }\n\n  context.applySession(next)\n  if (context.dispatch) {\n    let result: OperationResult<unknown>\n    try {\n      result = await context.dispatch(next)\n    } catch (cause) {\n      // Operations never throw by contract; treat a broken transport the same\n      // as a failed command so the cell still rolls back visibly.\n      result = {\n        ok: false,\n        error: { code: 'unknown', message: cause instanceof Error ? cause.message : String(cause) },\n      }\n    }\n    if (!result.ok) {\n      context.rollbackSession(input.doc)\n      return { ok: false, error: result.error }\n    }\n  }\n  return { ok: true, doc: next }\n}\n\n/** The message the cell renders for a rejection: the first issue beats the envelope. */\nexport function cellErrorMessage(error: OperationError): string {\n  // EC-494: an OperationIssue now carries its catalog ref across the wire, so a\n  // rejection built SERVER-SIDE (the publish gate) localizes here too — not only the\n  // studio-built ones above.\n  if (error.code === 'validation' && error.issues.length > 0)\n    return operationIssueMessage(error.issues[0]!)\n  return operationErrorMessage(error)\n}\n"]}

package/dist/components/cms/cms-store.d.ts

@@ -1,5 +1,5 @@
 import type { ReactNode } from 'react';
-import type { CmsDocument, CmsValidationIssue, CollectionDef, CollectionRegistry, DocumentRef, FieldDef, Locale, LocaleConfig, LocalizedString, RestoreScope } from '@elytracms/core/cms-core';
+import type { CmsDocument, CmsValidationIssue, CollectionDef, CollectionRegistry, DocumentRef, FieldDef, Locale, LocaleConfig, LocalizedString, RestoreScope, ValidateDocumentOptions } from '@elytracms/core/cms-core';
 import type { DocumentVersionRecord } from '@elytracms/core/persistence';
 import type { OperationError } from '@elytracms/studio/lib/operations';
 import type { TableViewState } from '@elytracms/studio/lib/cms-views';
@@ -134,6 +134,19 @@ export interface CmsStore {
     restoreDocumentVersion(ref: DocumentRef, version: number, scope?: RestoreScope): Promise<CmsDocument | null>;
     importDocuments(collectionId: string, docs: unknown[]): ImportReport;
     validate(doc: CmsDocument): CmsValidationIssue[];
+    /**
+     * THE validation option bag {@link validate} uses (EC-497) — the session document
+     * store, the project locales, the composition + rich-text-embed leashes, the
+     * published-ness pointer and the real asset-library oracle, built once by
+     * `gateValidateOptions`.
+     *
+     * Exposed so a surface validating a document that is NOT yet in the session (the
+     * AI engines judge a proposal before it exists) passes the editor's rules WHOLE.
+     * EC-473 exposed the two store-dependent halves for that; handing over the bag
+     * instead removes the remaining way to get it wrong — assembling a subset at the
+     * call site, which is the defect EC-497 exists to end.
+     */
+    validateOptions: ValidateDocumentOptions;
     isFieldReadOnly(field: FieldDef): boolean;
     viewsOf(collectionId: string): SavedView[];
     activeViewId(collectionId: string): string;
@@ -211,14 +224,7 @@ export declare function buildNewDocument(collectionId: string, registry: Collect
  * can never materialize a second singleton document.
  */
 export declare function hasDocumentFor(docs: readonly CmsDocument[], collectionId: string): boolean;
-/**
- * The CMS session store (EC-141): documents and collections are optimistic,
- * synchronous session state (live validation while typing); every mutation —
- * create/save/delete/state transitions — is mirrored onto the operations
- * layer (`documents.*` / `schema.*` commands) through {@link createCmsPersister}.
- * Failed/denied commands surface as {@link CmsStore.persistError}.
- */
-export declare function CmsProvider({ children, projectId, initialCollections, initialDocuments, initialPublishedKeys, initialTimestamps, initialPublishTimestamps, initialChangedKeys, initialLocaleConfig, seedReflectsWrites, }: {
+export interface CmsProviderProps {
     children: ReactNode;
     /** Enables persistence through the shared operations client. */
     projectId?: string;
@@ -229,13 +235,23 @@ export declare function CmsProvider({ children, projectId, initialCollections, i
      * Omitted → the historical mode default (connected hydrates, playground may not).
      */
     seedReflectsWrites?: boolean;
-    /** Seed collections (e.g. from an imported starter kit, EC-119); defaults to the samples. */
+    /**
+     * The session's collections — the project's own schema (hydration, a starter
+     * kit, or `elytra.config.ts`). Absent → **no collections** (EC-479): the store
+     * used to fall back to `cms-core`'s `sampleFilterableCollections`, so a studio
+     * whose config never arrived showed the engine's demo schema as if it were the
+     * project's. The absence is now reported at the rail (`projectConfigIssues`).
+     */
     initialCollections?: CollectionDef[];
+    /**
+     * The session's documents. Absent → **none** (EC-479; was `sampleDocuments`).
+     */
     initialDocuments?: CmsDocument[];
     /**
      * Published document keys from hydration (EC-224): the version pointer
-     * (`publishedVersion` set). Absent (kit / fixture sessions) → the sample
-     * fixtures' published set (`samplePublishedKeys`).
+     * (`publishedVersion` set). Absent (kit / fixture sessions) → none published
+     * (EC-479 retired the `samplePublishedKeys` fixture default, which only ever
+     * described the engine's own sample documents).
      */
     initialPublishedKeys?: readonly string[];
     /**
@@ -261,9 +277,33 @@ export declare function CmsProvider({ children, projectId, initialCollections, i
      * returned records. Absent (playground / kit) → empty set.
      */
     initialChangedKeys?: readonly string[];
-    /** Locale config for the seeded content; defaults to the sample config. */
+    /**
+     * Locale config for this session — the PROJECT's own (config-declared locales,
+     * or its persisted settings; see `resolveCmsInitialLocaleConfig`). Absent → the
+     * active config project's locales are read directly, and failing that the
+     * session runs with no locale at all rather than the engine's `en/de`
+     * `sampleLocaleConfig` fixture (EC-479/EC-483: the default locale is the literal
+     * storage key for localized values, so inventing one is a future data migration).
+     */
     initialLocaleConfig?: LocaleConfig;
-}): import("react").JSX.Element;
+}
+/**
+ * The CMS session store (EC-141): documents and collections are optimistic,
+ * synchronous session state (live validation while typing); every mutation —
+ * create/save/delete/state transitions — is mirrored onto the operations
+ * layer (`documents.*` / `schema.*` commands) through {@link createCmsPersister}.
+ * Failed/denied commands surface as {@link CmsStore.persistError}.
+ *
+ * EC-479 — this outer component exists to make ONE property structural: a CMS
+ * session always runs in the project's own locale, or it does not run. The locale
+ * is resolved here (the caller's, else the active `elytra.config.ts` project's)
+ * and handed to {@link CmsSession} as a REQUIRED value, so no branch inside the
+ * session can reach for the engine's `sampleLocaleConfig` — the default locale is
+ * the storage key every localized value is written under (EC-483), and a session
+ * that guessed it would corrupt content rather than fail. With no locale at all
+ * the surface says so instead of editing in an invented one.
+ */
+export declare function CmsProvider(props: CmsProviderProps): import("react").JSX.Element;
 export { useCms };
 export { primaryField };
 export type { Locale };

package/dist/components/cms/cms-store.js

@@ -1,11 +1,13 @@
-import { jsx as _jsx } from "react/jsx-runtime";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useCallback, useEffect, useMemo, useRef, useState } from 'react';
-import { createCollectionRegistry, createDocumentStore, documentKey, documentSchema, resolveDocumentTitle, resolveField, sampleDocuments, seedDefaults, sampleFilterableCollections, sampleLocaleConfig, samplePublishedKeys, resolveSingletonDocument, titleFieldOf, validateDocument, } from '@elytracms/core/cms-core';
+import { createCollectionRegistry, createDocumentStore, documentKey, documentReachabilityIssues, documentSchema, resolveDocumentTitle, resolveField, seedDefaults, resolveSingletonDocument, titleFieldOf, validateDocument, } from '@elytracms/core/cms-core';
 import { translate } from '@elytracms/studio/lib/i18n';
 import { configureStudioLocales, useStudioLocale } from '@elytracms/studio/lib/locale';
 import { studioManifestLookup } from '@elytracms/studio/lib/registry';
-import { resolveDeploymentCollections, resolveDeploymentRoutes } from '@elytracms/studio/lib/workspace';
-import { validateComposition, validateRichTextEmbeds } from './cms-composition-validators.js';
+import { resolveDeploymentCollections, resolveDeploymentLocaleConfig, resolveDeploymentRoutes, } from '@elytracms/studio/lib/workspace';
+import { Heading, Panel, Stack, Text } from '@elytracms/studio/ui';
+import { gateValidateOptions } from './gate-validation.js';
+import { clearSessionDocumentValidator, setSessionDocumentValidator, } from '@elytracms/studio/lib/cms/document-gate';
 import { matchesRef, removeDoc, replaceDoc, upsertDoc } from './document-ref-utils.js';
 import { createRequiredContext } from '@elytracms/studio/lib/required-context';
 import { createCmsPersister, getStudioOperations } from '@elytracms/studio/lib/operations';
@@ -116,10 +118,34 @@ function defaultView(collection, pseudo = []) {
  * create/save/delete/state transitions — is mirrored onto the operations
  * layer (`documents.*` / `schema.*` commands) through {@link createCmsPersister}.
  * Failed/denied commands surface as {@link CmsStore.persistError}.
+ *
+ * EC-479 — this outer component exists to make ONE property structural: a CMS
+ * session always runs in the project's own locale, or it does not run. The locale
+ * is resolved here (the caller's, else the active `elytra.config.ts` project's)
+ * and handed to {@link CmsSession} as a REQUIRED value, so no branch inside the
+ * session can reach for the engine's `sampleLocaleConfig` — the default locale is
+ * the storage key every localized value is written under (EC-483), and a session
+ * that guessed it would corrupt content rather than fail. With no locale at all
+ * the surface says so instead of editing in an invented one.
+ */
+export function CmsProvider(props) {
+    const localeConfig = props.initialLocaleConfig ?? resolveDeploymentLocaleConfig();
+    if (localeConfig === undefined)
+        return _jsx(MissingProjectLocales, {});
+    return _jsx(CmsSession, { ...props, localeConfig: localeConfig });
+}
+/**
+ * The project declares no locales, so there is no key to write localized values
+ * under. Visible and specific rather than a silent fixture locale (EC-479) — and
+ * the rail foot carries the same finding as a project-level validation issue
+ * (`projectConfigIssues`), so it is reported wherever the developer is looking.
  */
-export function CmsProvider({ children, projectId, initialCollections, initialDocuments, initialPublishedKeys, initialTimestamps, initialPublishTimestamps, initialChangedKeys, initialLocaleConfig, seedReflectsWrites, }) {
+function MissingProjectLocales() {
+    return (_jsx(Panel, { className: "m-6 p-6", children: _jsxs(Stack, { gap: "2", children: [_jsx(Heading, { level: 2, size: "h4", children: translate('cms.session.noLocales.title') }), _jsx(Text, { size: "sm", tone: "subtle", children: translate('cms.session.noLocales.body') })] }) }));
+}
+function CmsSession({ children, projectId, initialCollections, initialDocuments, initialPublishedKeys, initialTimestamps, initialPublishTimestamps, initialChangedKeys, seedReflectsWrites, localeConfig, }) {
     const [documents, setDocuments] = useState(() => {
-        const seeded = (initialDocuments ?? sampleDocuments).map((d) => structuredClone(d));
+        const seeded = (initialDocuments ?? []).map((d) => structuredClone(d));
         // EC-320 (0.0.44 follow-up): merge any documents STAGED by the
         // Components-view "Use in document…" transfer — a cross-mount handoff in
         // EVERY mode (see document-staging.ts). EC-461: the merge rule keys on the
@@ -131,15 +157,13 @@ export function CmsProvider({ children, projectId, initialCollections, initialDo
             : consumeStagedDocuments(projectId, seeded, seedReflectsWrites);
     });
     // Published-ness as the version POINTER (EC-224), decoupled from the flat
-    // `state` enum: seeded from hydration's pointer set, or — when none is supplied
-    // — the canonical sample published set for the playground. A kit's imported
-    // content (`initialDocuments` without a pointer set) starts unpublished
-    // (drafts) until an editor publishes it. The flat `state` is never consulted.
-    const [publishedKeys, setPublishedKeys] = useState(() => {
-        if (initialPublishedKeys)
-            return new Set(initialPublishedKeys);
-        return new Set(initialDocuments ? [] : samplePublishedKeys);
-    });
+    // `state` enum: seeded from hydration's pointer set. A kit's imported content
+    // (`initialDocuments` without a pointer set) starts unpublished (drafts) until
+    // an editor publishes it, and so does a session with no pointer set at all —
+    // EC-479 retired the `samplePublishedKeys` branch, which pinned the ENGINE's
+    // sample documents live in a session that no longer has any. The flat `state`
+    // is never consulted.
+    const [publishedKeys, setPublishedKeys] = useState(() => new Set(initialPublishedKeys ?? []));
     // EC-445: per-document last-write timestamps behind the `$updatedAt` column.
     // Seeded from hydration (connected: the persisted `cmsDocuments.updatedAt`), then
     // re-stamped on the common edit paths. A seeded document with no hydrated timestamp
@@ -152,7 +176,7 @@ export function CmsProvider({ children, projectId, initialCollections, initialDo
             for (const [key, value] of Object.entries(initialTimestamps))
                 map.set(key, value);
         }
-        for (const doc of initialDocuments ?? sampleDocuments) {
+        for (const doc of initialDocuments ?? []) {
             const key = documentKey(doc);
             if (!map.has(key))
                 map.set(key, now);
@@ -239,12 +263,13 @@ export function CmsProvider({ children, projectId, initialCollections, initialDo
     // Collections are stateful so AI-generated schemas (EC-097) can be accepted
     // into the session. The session schema IS the source the sort/filter
     // offering follows (EC-177 gap 3): hydrated sessions receive the persisted
-    // schema via `initialCollections`; the fixture fallback is the canonical
-    // cms-core sample schema WITH its declared `filterable` flags — no
-    // session-side widenings, so the studio never offers a field the backend's
-    // delivery engine would reject.
+    // schema via `initialCollections`, which is the project's own throughout —
+    // hydration, a kit, or `elytra.config.ts` (`resolveCmsInitialCollections`).
+    // EC-479: with none, the session has NO collections and the rail says so; it
+    // no longer borrows the engine's sample schema, which offered `filterable`
+    // fields the project's real backend would reject.
     const [collections, setCollections] = useState(() => [
-        ...(initialCollections ?? sampleFilterableCollections),
+        ...(initialCollections ?? []),
     ]);
     const [persistError, setPersistError] = useState(null);
     const seq = useRef(0);
@@ -275,9 +300,17 @@ export function CmsProvider({ children, projectId, initialCollections, initialDo
             onDocumentSaved: adoptSavedRecord,
         });
     }
+    // EC-224: published-ness IS the version pointer (`publishedKeys`) — the SOLE
+    // studio source of truth. Declared up here (EC-497) because it is part of THE
+    // validation option bag, which the cell-edit commit — defined above the publish
+    // helpers — now also takes.
+    const isPublished = useCallback((ref) => publishedKeys.has(documentKey(ref)), [publishedKeys]);
     const registry = useMemo(() => createCollectionRegistry(collections), [collections]);
+    // EC-497: the gate seam registers ONCE and reads through refs, so it always sees
+    // the latest session without re-registering on every keystroke.
+    const registryRef = useRef(registry);
+    registryRef.current = registry;
     const store = useMemo(() => createDocumentStore(documents), [documents]);
-    const localeConfig = initialLocaleConfig ?? sampleLocaleConfig;
     // Asset existence is validated against the REAL asset library (assets live in
     // their own repository, not as CMS documents). With the ambient AssetsProvider
     // present, the oracle is the set of uploaded asset ids — but only once loaded;
@@ -295,7 +328,12 @@ export function CmsProvider({ children, projectId, initialCollections, initialDo
     }, [assetStore]);
     // The ambient studio locale (EC-176): this session's locale config drives
     // the switcher options; every CMS surface follows the one active locale.
-    const { locale: activeLocale } = useStudioLocale();
+    // EC-479: the ambient store is `null` until this effect installs the project's
+    // config (it no longer opens on the engine's `en/de` fixture), so the FIRST
+    // render — and any surface mounted outside a CMS session — reads the project's
+    // own default here rather than a locale nobody declared.
+    const { locale } = useStudioLocale();
+    const activeLocale = locale ?? localeConfig.default;
     useEffect(() => {
         configureStudioLocales(localeConfig);
     }, [localeConfig]);
@@ -338,6 +376,11 @@ export function CmsProvider({ children, projectId, initialCollections, initialDo
             registry,
             documents: documentsRef.current,
             localeConfig,
+            // EC-497: the remaining halves of THE option bag. A cell edit now
+            // validates with exactly what the editor and the publish gate use and
+            // filters the result to the committed cell — it is not a weaker check.
+            isPublished,
+            ...(assetExists ? { assetExists } : {}),
             // EC-445: the optimistic apply bumps the $updatedAt column (a rollback
             // leaves it — it self-corrects on the next hydration).
             applySession: (doc) => {
@@ -362,7 +405,15 @@ export function CmsProvider({ children, projectId, initialCollections, initialDo
                 }
                 : {}),
         }, input);
-    }, [registry, localeConfig, projectId, stampUpdatedAt, adoptSavedRecord]);
+    }, [
+        registry,
+        localeConfig,
+        projectId,
+        isPublished,
+        assetExists,
+        stampUpdatedAt,
+        adoptSavedRecord,
+    ]);
     // Shared insert sequence (EC-326): existingIds/mint/seedDefaults (via
     // `buildNewDocument`) + optimistic append + persist, consumed by both
     // `createDocument` (always inserts) and `ensureSingletonDocument`'s empty
@@ -438,7 +489,6 @@ export function CmsProvider({ children, projectId, initialCollections, initialDo
             return next;
         });
     }, []);
-    const isPublished = useCallback((ref) => publishedKeys.has(documentKey(ref)), [publishedKeys]);
     // Reconcile published-ness for a ref against the AUTHORITATIVE backend record
     // (EC-225): the optimistic flip is a guess; once the queued op settles we read
     // the actual pin so the badge can never claim a state the backend refused
@@ -527,18 +577,53 @@ export function CmsProvider({ children, projectId, initialCollections, initialDo
         adoptSavedRecord(result.value);
         return restored;
     }, [projectId, adoptSavedRecord]);
-    const validate = useCallback((doc) => validateDocument(registry, doc, {
+    /**
+     * EC-497 — THE option bag (AD-497a), built once and used by every surface that
+     * validates a CMS document. `gateValidateOptions` is the only place options are
+     * assembled; before it there were seven hand-assembled subsets and the weakest
+     * one was the publish gate. Note it carries `isPublished` too: the EC-173
+     * weak-reference warning sources published-ness from the version POINTER, so
+     * editing a published doc that references an unpublished target surfaces the
+     * fallback warning (it had gone inert when the flat `state` mirror was dropped).
+     */
+    const validateOptions = useMemo(() => gateValidateOptions({
         store,
         localeConfig,
-        validateComposition,
-        validateRichTextEmbeds,
-        // EC-224: the EC-173 weak-reference warning sources published-ness from
-        // the version pointer, so editing a published doc that references an
-        // unpublished target surfaces the fallback warning again (it had gone
-        // inert once the flat `state` mirror was dropped in B-3b).
         isPublished,
-        assetExists,
-    }), [registry, store, localeConfig, isPublished, assetExists]);
+        ...(assetExists ? { assetExists } : {}),
+    }), [store, localeConfig, isPublished, assetExists]);
+    const validate = useCallback((doc) => {
+        const issues = validateDocument(registry, doc, validateOptions);
+        // EC-492: a document whose composed URL no request can reach — a top-level
+        // slug that collides with a declared locale code, which the host reads as a
+        // locale prefix. Not part of `validateDocument` because it needs the project
+        // ROUTES (the schema validator is route-free by design); emitted here, where
+        // the deployment's routes and the collection's sibling set are both in hand.
+        // Silent in a single-locale project — the fault is structurally impossible.
+        const collection = registry.get(doc.collection);
+        if (!collection)
+            return issues;
+        return [
+            ...issues,
+            ...documentReachabilityIssues({ routes: resolveDeploymentRoutes(), localeConfig }, collection, doc, { siblings: documents.filter((sibling) => sibling.collection === doc.collection) }),
+        ];
+    }, [registry, validateOptions, documents, localeConfig]);
+    /**
+     * EC-497 — publish the session's canonical validator to the gate seam, so the
+     * operations-layer `documents.publish` gate judges a document with exactly these
+     * rules instead of the weaker, mode-dependent ones it read off the adapter's
+     * schema record. `[]` for a collection the config does not declare preserves the
+     * EC-183/AD-11 data-store rule (studio system collections carry no config field
+     * rules); a validator kept fresh through a ref means the seam sees the latest
+     * session without re-registering per keystroke.
+     */
+    const gateRef = useRef(validate);
+    gateRef.current = validate;
+    useEffect(() => {
+        const owned = (doc) => registryRef.current.has(doc.collection) ? gateRef.current(doc) : [];
+        setSessionDocumentValidator(owned);
+        return () => clearSessionDocumentValidator(owned);
+    }, []);
     const importDocuments = useCallback((collectionId, raw) => {
         const report = { added: 0, rejected: [] };
         // Pre-parse so intra-batch relation/asset targets resolve during validation.
@@ -565,8 +650,17 @@ export function CmsProvider({ children, projectId, initialCollections, initialDo
         // Validate each against existing docs PLUS the rest of the batch.
         const batchStore = createDocumentStore([...documents, ...parsedBatch]);
         const accepted = [];
+        // EC-497: the same bag as everywhere else, over the batch-aware store. It
+        // used to omit the composition leashes and the published-ness pointer, so an
+        // import could land a document the editor would immediately flag.
+        const importOptions = gateValidateOptions({
+            store: batchStore,
+            localeConfig,
+            isPublished,
+            ...(assetExists ? { assetExists } : {}),
+        });
         for (const doc of parsedBatch) {
-            const issues = validateDocument(registry, doc, { store: batchStore, localeConfig, assetExists });
+            const issues = validateDocument(registry, doc, importOptions);
             const errors = issues.filter((iss) => iss.severity === 'error');
             if (errors.length > 0)
                 report.rejected.push({ id: doc.id, issues: errors });
@@ -587,7 +681,7 @@ export function CmsProvider({ children, projectId, initialCollections, initialDo
             report.added = accepted.length;
         }
         return report;
-    }, [registry, documents, localeConfig, assetExists]);
+    }, [registry, documents, localeConfig, isPublished, assetExists]);
     const isFieldReadOnly = useCallback((field) => field.form?.readOnly === true, []);
     // --- Views (EC-246b: config-as-code) --------------------------------------
     // EC-445: the reserved pseudo-columns a CMS collection's list surfaces. Every
@@ -720,17 +814,17 @@ export function CmsProvider({ children, projectId, initialCollections, initialDo
         return runBulkAction({
             documents: documentsRef.current,
             titleOf,
-            validate: (doc) => validateDocument(registry, doc, {
+            // EC-497: THE bag, over the freshest session snapshot (`runBulk` is
+            // async, so `documentsRef.current` — not the memoized store — is the
+            // world as it is now). It used to be assembled here and silently missed
+            // `isPublished`, so a bulk publish and a single publish of the same
+            // document could disagree about the EC-173 weak-reference warning.
+            validate: (doc) => validateDocument(registry, doc, gateValidateOptions({
                 store: createDocumentStore(documentsRef.current),
                 localeConfig,
-                // EC-225: include the composition validators so a bulk PUBLISH
-                // gates blocks/richText validity the same way the detail editor
-                // does — the operations-layer publish gate has no component
-                // registry, so composition validity is a studio-validation invariant.
-                validateComposition,
-                validateRichTextEmbeds,
-                assetExists,
-            }),
+                isPublished,
+                ...(assetExists ? { assetExists } : {}),
+            })),
             // EC-425: bulk publish joins the single-document clean point — the
             // SAME shared hidden-strip `doPublish` runs (EC-273 field values +
             // EC-394 component props, session registry), per item.
@@ -775,6 +869,7 @@ export function CmsProvider({ children, projectId, initialCollections, initialDo
         localeConfig,
         activeLocale,
         setPublished,
+        isPublished,
         assetExists,
         adoptSavedRecord,
         stampHasUnpublishedChanges,
@@ -803,6 +898,7 @@ export function CmsProvider({ children, projectId, initialCollections, initialDo
         restoreDocumentVersion,
         importDocuments,
         validate,
+        validateOptions,
         isFieldReadOnly,
         viewsOf,
         activeViewId: (collectionId) => activeViews[collectionId] ?? initialViewId(collectionId),
@@ -858,6 +954,7 @@ export function CmsProvider({ children, projectId, initialCollections, initialDo
         restoreDocumentVersion,
         importDocuments,
         validate,
+        validateOptions,
         isFieldReadOnly,
         viewsOf,
         activeViews,