@elytracms/studio 0.0.84 → 0.0.86

package/dist/lib/ai/route-fetch.js

@@ -0,0 +1,98 @@
+/**
+ * The AI route's response-shape guard (EC-514 rider): ONE wrapping `fetch` shared by
+ * both client call sites of the mounted route — the panel's chat transport
+ * (`useChat` + `DefaultChatTransport`, which accepts a `fetch` option) and the
+ * structured proxy in `createRouteProvider` — so "the route is not mounted at this
+ * path" is a typed, nameable failure at both, instead of whatever each transport
+ * makes of a page of HTML.
+ *
+ * Why this exists (measured, EC-514): with the EC-503 dev degrade active (studio
+ * `dist` missing → the Vite dev mount is skipped) a `POST /api/ai` falls through to
+ * the SPA shell — `200 text/html`. The chat transport treats a 200 as success and
+ * parses the HTML as an event stream; the HTML carries no `data:` lines, so the
+ * stream ends EMPTY and the panel shows the user's turn followed by nothing — no
+ * error note, no assistant turn. A silent failure, the exact state AGENTS.md §4
+ * forbids. The structured proxy's path is no better by construction: a 200 is
+ * `response.ok`, so it calls `response.json()` on `<!DOCTYPE …` — a parse error
+ * that names neither the path nor the cause.
+ *
+ * The contract this guard enforces is the route's OWN: `createAiRouteHandler` only
+ * ever answers `application/json` (every non-stream branch, `route.ts`
+ * `jsonResponse`) or the SDK's UI message stream (`text/event-stream`,
+ * `createUIMessageStreamResponse`). Anything else — an HTML shell, a host's 404
+ * page, a proxy's error page — was not produced by the route, so the request did
+ * not reach a mounted route at that path. Positive detection (what the route DOES
+ * answer) rather than a blocklist of page types, so a new kind of "something else"
+ * cannot slip past as success.
+ *
+ * Bundle discipline: imports nothing from `ai` / `@ai-sdk/*` (pinned in
+ * `bundle.test.ts`) — it is a plain `fetch` decorator.
+ */
+/** Media types the mounted route answers with — JSON, or the SDK's UI message stream. */
+const ROUTE_MEDIA_TYPES = new Set(['application/json', 'text/event-stream']);
+/** The bare media type of a `content-type` header (`text/html; charset=utf-8` → `text/html`). */
+export function mediaTypeOf(contentType) {
+    if (!contentType)
+        return null;
+    const bare = contentType.split(';')[0]?.trim().toLowerCase() ?? '';
+    return bare.length > 0 ? bare : null;
+}
+/** True when a response's content type is one the AI route itself produces. */
+export function isAiRouteAnswer(contentType) {
+    const media = mediaTypeOf(contentType);
+    return media !== null && ROUTE_MEDIA_TYPES.has(media);
+}
+/**
+ * Thrown by {@link guardAiRouteFetch} when the answer at `endpoint` was not produced
+ * by the AI route — no route is mounted there (or something in front of it
+ * answered). Carries what a developer needs to act: the path, the status, and the
+ * content type that came back. The `message` is self-describing on purpose: the
+ * tool executor (`tools.ts`) surfaces `error.message` verbatim as a tool step's
+ * error text, and a bare "unavailable" there would hide the cause again.
+ */
+export class AiRouteNotMountedError extends Error {
+    endpoint;
+    status;
+    contentType;
+    name = 'AiRouteNotMountedError';
+    constructor(endpoint, status, contentType) {
+        super(`No AI route is mounted at ${endpoint}: the request was answered with ` +
+            `${contentType ?? 'no content type'} (HTTP ${status}) instead of the route's JSON or event stream.`);
+        this.endpoint = endpoint;
+        this.status = status;
+        this.contentType = contentType;
+    }
+}
+/** Type guard for {@link AiRouteNotMountedError} (works across bundle copies — checks the name). */
+export function isAiRouteNotMountedError(error) {
+    return (error instanceof AiRouteNotMountedError ||
+        (typeof error === 'object' &&
+            error !== null &&
+            error.name === 'AiRouteNotMountedError' &&
+            typeof error.endpoint === 'string'));
+}
+/** The path a `fetch` input names (string, `URL`, or `Request`). */
+function endpointOf(input) {
+    if (typeof input === 'string')
+        return input;
+    if (input instanceof URL)
+        return input.toString();
+    return input.url;
+}
+/**
+ * Wrap a `fetch` so a response the AI route could not have produced throws
+ * {@link AiRouteNotMountedError} instead of being handed to a JSON/stream parser.
+ * Everything else — including the route's own error answers (401/429/502 JSON) —
+ * passes through unchanged for the existing handlers.
+ */
+export function guardAiRouteFetch(fetchImpl = fetch) {
+    return async (input, init) => {
+        const response = await fetchImpl(input, init);
+        const contentType = response.headers.get('content-type');
+        if (!isAiRouteAnswer(contentType)) {
+            throw new AiRouteNotMountedError(endpointOf(input), response.status, contentType);
+        }
+        return response;
+    };
+}
+//# sourceMappingURL=route-fetch.js.map

package/dist/lib/ai/route-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-fetch.js","sourceRoot":"","sources":["../../../src/lib/ai/route-fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,yFAAyF;AACzF,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAC,CAAA;AAEjG,iGAAiG;AACjG,MAAM,UAAU,WAAW,CAAC,WAAsC;IAChE,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAA;IAC7B,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAA;IAClE,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;AACtC,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,eAAe,CAAC,WAAsC;IACpE,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;IACtC,OAAO,KAAK,KAAK,IAAI,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;AACvD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAGpC;IACA;IACA;IAJO,IAAI,GAAG,wBAAwB,CAAA;IACjD,YACW,QAAgB,EAChB,MAAc,EACd,WAA0B;QAEnC,KAAK,CACH,6BAA6B,QAAQ,kCAAkC;YACrE,GAAG,WAAW,IAAI,iBAAiB,UAAU,MAAM,gDAAgD,CACtG,CAAA;QAPQ,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAAQ;QACd,gBAAW,GAAX,WAAW,CAAe;IAMrC,CAAC;CACF;AAED,oGAAoG;AACpG,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,OAAO,CACL,KAAK,YAAY,sBAAsB;QACvC,CAAC,OAAO,KAAK,KAAK,QAAQ;YACxB,KAAK,KAAK,IAAI;YACb,KAA4B,CAAC,IAAI,KAAK,wBAAwB;YAC/D,OAAQ,KAAgC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAClE,CAAA;AACH,CAAC;AAED,oEAAoE;AACpE,SAAS,UAAU,CAAC,KAAwB;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,IAAI,KAAK,YAAY,GAAG;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAA;IACjD,OAAO,KAAK,CAAC,GAAG,CAAA;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAA0B,KAAK;IAC/D,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QAC7C,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;QACxD,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,sBAAsB,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;QACnF,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC,CAAA;AACH,CAAC","sourcesContent":["/**\n * The AI route's response-shape guard (EC-514 rider): ONE wrapping `fetch` shared by\n * both client call sites of the mounted route — the panel's chat transport\n * (`useChat` + `DefaultChatTransport`, which accepts a `fetch` option) and the\n * structured proxy in `createRouteProvider` — so \"the route is not mounted at this\n * path\" is a typed, nameable failure at both, instead of whatever each transport\n * makes of a page of HTML.\n *\n * Why this exists (measured, EC-514): with the EC-503 dev degrade active (studio\n * `dist` missing → the Vite dev mount is skipped) a `POST /api/ai` falls through to\n * the SPA shell — `200 text/html`. The chat transport treats a 200 as success and\n * parses the HTML as an event stream; the HTML carries no `data:` lines, so the\n * stream ends EMPTY and the panel shows the user's turn followed by nothing — no\n * error note, no assistant turn. A silent failure, the exact state AGENTS.md §4\n * forbids. The structured proxy's path is no better by construction: a 200 is\n * `response.ok`, so it calls `response.json()` on `<!DOCTYPE …` — a parse error\n * that names neither the path nor the cause.\n *\n * The contract this guard enforces is the route's OWN: `createAiRouteHandler` only\n * ever answers `application/json` (every non-stream branch, `route.ts`\n * `jsonResponse`) or the SDK's UI message stream (`text/event-stream`,\n * `createUIMessageStreamResponse`). Anything else — an HTML shell, a host's 404\n * page, a proxy's error page — was not produced by the route, so the request did\n * not reach a mounted route at that path. Positive detection (what the route DOES\n * answer) rather than a blocklist of page types, so a new kind of \"something else\"\n * cannot slip past as success.\n *\n * Bundle discipline: imports nothing from `ai` / `@ai-sdk/*` (pinned in\n * `bundle.test.ts`) — it is a plain `fetch` decorator.\n */\n\n/** Media types the mounted route answers with — JSON, or the SDK's UI message stream. */\nconst ROUTE_MEDIA_TYPES: ReadonlySet<string> = new Set(['application/json', 'text/event-stream'])\n\n/** The bare media type of a `content-type` header (`text/html; charset=utf-8` → `text/html`). */\nexport function mediaTypeOf(contentType: string | null | undefined): string | null {\n  if (!contentType) return null\n  const bare = contentType.split(';')[0]?.trim().toLowerCase() ?? ''\n  return bare.length > 0 ? bare : null\n}\n\n/** True when a response's content type is one the AI route itself produces. */\nexport function isAiRouteAnswer(contentType: string | null | undefined): boolean {\n  const media = mediaTypeOf(contentType)\n  return media !== null && ROUTE_MEDIA_TYPES.has(media)\n}\n\n/**\n * Thrown by {@link guardAiRouteFetch} when the answer at `endpoint` was not produced\n * by the AI route — no route is mounted there (or something in front of it\n * answered). Carries what a developer needs to act: the path, the status, and the\n * content type that came back. The `message` is self-describing on purpose: the\n * tool executor (`tools.ts`) surfaces `error.message` verbatim as a tool step's\n * error text, and a bare \"unavailable\" there would hide the cause again.\n */\nexport class AiRouteNotMountedError extends Error {\n  override readonly name = 'AiRouteNotMountedError'\n  constructor(\n    readonly endpoint: string,\n    readonly status: number,\n    readonly contentType: string | null,\n  ) {\n    super(\n      `No AI route is mounted at ${endpoint}: the request was answered with ` +\n        `${contentType ?? 'no content type'} (HTTP ${status}) instead of the route's JSON or event stream.`,\n    )\n  }\n}\n\n/** Type guard for {@link AiRouteNotMountedError} (works across bundle copies — checks the name). */\nexport function isAiRouteNotMountedError(error: unknown): error is AiRouteNotMountedError {\n  return (\n    error instanceof AiRouteNotMountedError ||\n    (typeof error === 'object' &&\n      error !== null &&\n      (error as { name?: unknown }).name === 'AiRouteNotMountedError' &&\n      typeof (error as { endpoint?: unknown }).endpoint === 'string')\n  )\n}\n\n/** The path a `fetch` input names (string, `URL`, or `Request`). */\nfunction endpointOf(input: RequestInfo | URL): string {\n  if (typeof input === 'string') return input\n  if (input instanceof URL) return input.toString()\n  return input.url\n}\n\n/**\n * Wrap a `fetch` so a response the AI route could not have produced throws\n * {@link AiRouteNotMountedError} instead of being handed to a JSON/stream parser.\n * Everything else — including the route's own error answers (401/429/502 JSON) —\n * passes through unchanged for the existing handlers.\n */\nexport function guardAiRouteFetch(fetchImpl: typeof fetch = fetch): typeof fetch {\n  return async (input, init) => {\n    const response = await fetchImpl(input, init)\n    const contentType = response.headers.get('content-type')\n    if (!isAiRouteAnswer(contentType)) {\n      throw new AiRouteNotMountedError(endpointOf(input), response.status, contentType)\n    }\n    return response\n  }\n}\n"]}

package/dist/lib/ai/route-provider.d.ts

@@ -1,31 +1,14 @@
-/**
- * `createRouteProvider` — the CLIENT-side {@link AiProvider} the studio runs in the
- * browser (EC-199). It is a thin proxy that forwards `generateStructured` to the
- * host's mounted {@link createAiRouteHandler} endpoint over `fetch`. The provider
- * KEY never touches the browser: the key-holding {@link createAnthropicProvider}
- * lives only inside the server route; the studio's `defineStudio({ ai: { provider } })`
- * gets this route provider (or the FakeProvider for a keyless playground), so the
- * whole authoring loop — `applyContentWithShape` included — proxies its model calls
- * through the session-gated route while the tools (search / list / apply) execute
- * client-side with the user's own session. It exposes NO `languageModel()` — the
- * conversational loop talks to the route's native chat branch directly (EC-334,
- * `useChat` + `DefaultChatTransport`), not through this provider; the provider
- * only NAMES that target ({@link AiChatTarget}) so endpoint + session headers are
- * configured once.
- *
- * Bundle-safe by construction: this module imports nothing from `ai` / `@ai-sdk/*`
- * (it only uses `fetch`), so it stays off the AI-SDK dependency edge the bundle test
- * pins — the route provider can sit on the studio critical path without pulling the
- * SDK. The capability gate passes: the route only ever fronts a gate-checked provider
- * (validated at the server mount), so the proxy declares both required capabilities.
- */
 import type { AiProvider } from './types.js';
 /** How extra request headers are supplied — a static set or a (possibly async) thunk. */
 export type RouteHeaders = HeadersInit | (() => HeadersInit | undefined | Promise<HeadersInit | undefined>);
 export interface RouteProviderOptions {
     /** The mounted route path/URL (default `/api/ai`). */
     endpoint?: string;
-    /** `fetch` implementation (default the global). Injected in tests. */
+    /**
+     * `fetch` implementation (default the global). Injected in tests. Always wrapped
+     * by {@link guardAiRouteFetch} (EC-514): an answer the route could not have
+     * produced — the SPA shell, a host 404 page — throws `AiRouteNotMountedError`.
+     */
     fetchImpl?: typeof fetch;
     /**
      * Extra headers per request — e.g. the studio session token the route's `getSession`

package/dist/lib/ai/route-provider.js

@@ -1,3 +1,25 @@
+/**
+ * `createRouteProvider` — the CLIENT-side {@link AiProvider} the studio runs in the
+ * browser (EC-199). It is a thin proxy that forwards `generateStructured` to the
+ * host's mounted {@link createAiRouteHandler} endpoint over `fetch`. The provider
+ * KEY never touches the browser: the key-holding {@link createAnthropicProvider}
+ * lives only inside the server route; the studio's `defineStudio({ ai: { provider } })`
+ * gets this route provider (or the FakeProvider for a keyless playground), so the
+ * whole authoring loop — `applyContentWithShape` included — proxies its model calls
+ * through the session-gated route while the tools (search / list / apply) execute
+ * client-side with the user's own session. It exposes NO `languageModel()` — the
+ * conversational loop talks to the route's native chat branch directly (EC-334,
+ * `useChat` + `DefaultChatTransport`), not through this provider; the provider
+ * only NAMES that target ({@link AiChatTarget}) so endpoint + session headers are
+ * configured once.
+ *
+ * Bundle-safe by construction: this module imports nothing from `ai` / `@ai-sdk/*`
+ * (it only uses `fetch`), so it stays off the AI-SDK dependency edge the bundle test
+ * pins — the route provider can sit on the studio critical path without pulling the
+ * SDK. The capability gate passes: the route only ever fronts a gate-checked provider
+ * (validated at the server mount), so the proxy declares both required capabilities.
+ */
+import { guardAiRouteFetch } from './route-fetch.js';
 /** Default mount path a consuming studio app exposes for {@link createAiRouteHandler}. */
 export const DEFAULT_AI_ENDPOINT = '/api/ai';
 /**
@@ -44,7 +66,7 @@ async function errorCode(response) {
  */
 export function createRouteProvider(options = {}) {
     const endpoint = options.endpoint ?? DEFAULT_AI_ENDPOINT;
-    const fetchImpl = options.fetchImpl ?? fetch;
+    const fetchImpl = guardAiRouteFetch(options.fetchImpl ?? fetch);
     async function post(body) {
         const extra = await resolveHeaders(options.headers);
         const headers = new Headers(extra);

package/dist/lib/ai/route-provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"route-provider.js","sourceRoot":"","sources":["../../../src/lib/ai/route-provider.ts"],"names":[],"mappings":"AAiDA,0FAA0F;AAC1F,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAAA;AAmB5C;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA2B;IAC3D,MAAM,SAAS,GAAI,QAA4C,EAAE,UAAU,CAAA;IAC3E,IAAI,SAAS,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACzE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAA;AAC1C,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,OAAiC;IAC7D,IAAI,OAAO,OAAO,KAAK,UAAU;QAAE,OAAO,OAAO,EAAE,CAAA;IACnD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,kFAAkF;AAClF,MAAM,OAAO,YAAa,SAAQ,KAAK;IAE1B;IACA;IAFX,YACW,MAAc,EACd,IAAY;QAErB,KAAK,CAAC,4BAA4B,MAAM,KAAK,IAAI,GAAG,CAAC,CAAA;QAH5C,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QAGrB,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;IAC5B,CAAC;CACF;AAED,KAAK,UAAU,SAAS,CAAC,QAAkB;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAA;QAC3D,OAAO,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAA;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,gBAAgB,CAAA;IACzB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAgC,EAAE;IACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,mBAAmB,CAAA;IACxD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAA;IAE5C,KAAK,UAAU,IAAI,CAAC,IAAa;QAC/B,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACnD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAA;QAClC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAA;QAC/C,OAAO,SAAS,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACrF,CAAC;IAED,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,OAAO;QACzB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,UAAU,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QAChG,YAAY,EAAE,GAA2B,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;QAE3F,KAAK,CAAC,kBAAkB,CACtB,OAAkC;YAElC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAA;YAC1D,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;YACpF,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA6B,CAAA;QAC5D,CAAC;KACF,CAAA;AACH,CAAC","sourcesContent":["/**\n * `createRouteProvider` — the CLIENT-side {@link AiProvider} the studio runs in the\n * browser (EC-199). It is a thin proxy that forwards `generateStructured` to the\n * host's mounted {@link createAiRouteHandler} endpoint over `fetch`. The provider\n * KEY never touches the browser: the key-holding {@link createAnthropicProvider}\n * lives only inside the server route; the studio's `defineStudio({ ai: { provider } })`\n * gets this route provider (or the FakeProvider for a keyless playground), so the\n * whole authoring loop — `applyContentWithShape` included — proxies its model calls\n * through the session-gated route while the tools (search / list / apply) execute\n * client-side with the user's own session. It exposes NO `languageModel()` — the\n * conversational loop talks to the route's native chat branch directly (EC-334,\n * `useChat` + `DefaultChatTransport`), not through this provider; the provider\n * only NAMES that target ({@link AiChatTarget}) so endpoint + session headers are\n * configured once.\n *\n * Bundle-safe by construction: this module imports nothing from `ai` / `@ai-sdk/*`\n * (it only uses `fetch`), so it stays off the AI-SDK dependency edge the bundle test\n * pins — the route provider can sit on the studio critical path without pulling the\n * SDK. The capability gate passes: the route only ever fronts a gate-checked provider\n * (validated at the server mount), so the proxy declares both required capabilities.\n */\nimport type {\n  AiProvider,\n  AiProviderCapabilities,\n  GenerateStructuredRequest,\n  GenerateStructuredResult,\n} from './types'\n\n/** How extra request headers are supplied — a static set or a (possibly async) thunk. */\nexport type RouteHeaders =\n  | HeadersInit\n  | (() => HeadersInit | undefined | Promise<HeadersInit | undefined>)\n\nexport interface RouteProviderOptions {\n  /** The mounted route path/URL (default `/api/ai`). */\n  endpoint?: string\n  /** `fetch` implementation (default the global). Injected in tests. */\n  fetchImpl?: typeof fetch\n  /**\n   * Extra headers per request — e.g. the studio session token the route's `getSession`\n   * checks. A thunk is re-evaluated on every call so a refreshed token is picked up.\n   */\n  headers?: RouteHeaders\n  /** Provider id recorded in provenance (default `route`). */\n  id?: string\n  /** Model id recorded in provenance (the downstream model, when the host fixes one). */\n  model?: string\n}\n\n/** Default mount path a consuming studio app exposes for {@link createAiRouteHandler}. */\nexport const DEFAULT_AI_ENDPOINT = '/api/ai'\n\n/**\n * The chat transport target (EC-334): where the panel's `useChat` posts its\n * native `{ messages, context }` requests, and which extra headers ride along\n * (the session token thunk). `createRouteProvider` exposes its own endpoint +\n * headers here, so the ONE configured provider is the single source of truth\n * for both the structured proxy and the chat transport.\n */\nexport interface AiChatTarget {\n  endpoint: string\n  headers?: RouteHeaders\n}\n\n/** An {@link AiProvider} that also names the chat transport target it fronts. */\nexport interface RouteAiProvider extends AiProvider {\n  readonly chatTarget: AiChatTarget\n}\n\n/**\n * The chat target behind a configured provider: the route provider's own\n * endpoint + headers, or the default mount path for any other provider (the\n * chat loop always talks to the mounted route — a missing mount fails loud as\n * a visible route error in the panel, never silently).\n */\nexport function resolveChatTarget(provider: AiProvider | null): AiChatTarget {\n  const candidate = (provider as Partial<RouteAiProvider> | null)?.chatTarget\n  if (candidate && typeof candidate.endpoint === 'string') return candidate\n  return { endpoint: DEFAULT_AI_ENDPOINT }\n}\n\nasync function resolveHeaders(headers: RouteHeaders | undefined): Promise<HeadersInit | undefined> {\n  if (typeof headers === 'function') return headers()\n  return headers\n}\n\n/** A structured error thrown when the route rejects (surfaced by the chat UI). */\nexport class AiRouteError extends Error {\n  constructor(\n    readonly status: number,\n    readonly code: string,\n  ) {\n    super(`AI route request failed (${status}: ${code})`)\n    this.name = 'AiRouteError'\n  }\n}\n\nasync function errorCode(response: Response): Promise<string> {\n  try {\n    const body = (await response.json()) as { error?: unknown }\n    return typeof body.error === 'string' ? body.error : 'request-failed'\n  } catch {\n    return 'request-failed'\n  }\n}\n\n/**\n * Build a route-backed {@link AiProvider}. Deterministic given a deterministic route\n * (so the FakeProvider mounted behind the route drives the whole client loop in the\n * playground). Never holds a key; never imports the AI SDK.\n */\nexport function createRouteProvider(options: RouteProviderOptions = {}): RouteAiProvider {\n  const endpoint = options.endpoint ?? DEFAULT_AI_ENDPOINT\n  const fetchImpl = options.fetchImpl ?? fetch\n\n  async function post(body: unknown): Promise<Response> {\n    const extra = await resolveHeaders(options.headers)\n    const headers = new Headers(extra)\n    headers.set('content-type', 'application/json')\n    return fetchImpl(endpoint, { method: 'POST', headers, body: JSON.stringify(body) })\n  }\n\n  return {\n    id: options.id ?? 'route',\n    ...(options.model !== undefined ? { model: options.model } : {}),\n    chatTarget: { endpoint, ...(options.headers !== undefined ? { headers: options.headers } : {}) },\n    capabilities: (): AiProviderCapabilities => ({ toolCalling: true, structuredOutput: true }),\n\n    async generateStructured(\n      request: GenerateStructuredRequest,\n    ): Promise<GenerateStructuredResult> {\n      const response = await post({ kind: 'generate', request })\n      if (!response.ok) throw new AiRouteError(response.status, await errorCode(response))\n      return (await response.json()) as GenerateStructuredResult\n    },\n  }\n}\n"]}
+{"version":3,"file":"route-provider.js","sourceRoot":"","sources":["../../../src/lib/ai/route-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAiCjD,0FAA0F;AAC1F,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAAA;AAmB5C;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA2B;IAC3D,MAAM,SAAS,GAAI,QAA4C,EAAE,UAAU,CAAA;IAC3E,IAAI,SAAS,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACzE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAA;AAC1C,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,OAAiC;IAC7D,IAAI,OAAO,OAAO,KAAK,UAAU;QAAE,OAAO,OAAO,EAAE,CAAA;IACnD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,kFAAkF;AAClF,MAAM,OAAO,YAAa,SAAQ,KAAK;IAE1B;IACA;IAFX,YACW,MAAc,EACd,IAAY;QAErB,KAAK,CAAC,4BAA4B,MAAM,KAAK,IAAI,GAAG,CAAC,CAAA;QAH5C,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QAGrB,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;IAC5B,CAAC;CACF;AAED,KAAK,UAAU,SAAS,CAAC,QAAkB;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAA;QAC3D,OAAO,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAA;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,gBAAgB,CAAA;IACzB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAgC,EAAE;IACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,mBAAmB,CAAA;IACxD,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CAAA;IAE/D,KAAK,UAAU,IAAI,CAAC,IAAa;QAC/B,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACnD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAA;QAClC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAA;QAC/C,OAAO,SAAS,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACrF,CAAC;IAED,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,OAAO;QACzB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,UAAU,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QAChG,YAAY,EAAE,GAA2B,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;QAE3F,KAAK,CAAC,kBAAkB,CACtB,OAAkC;YAElC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAA;YAC1D,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;YACpF,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA6B,CAAA;QAC5D,CAAC;KACF,CAAA;AACH,CAAC","sourcesContent":["/**\n * `createRouteProvider` — the CLIENT-side {@link AiProvider} the studio runs in the\n * browser (EC-199). It is a thin proxy that forwards `generateStructured` to the\n * host's mounted {@link createAiRouteHandler} endpoint over `fetch`. The provider\n * KEY never touches the browser: the key-holding {@link createAnthropicProvider}\n * lives only inside the server route; the studio's `defineStudio({ ai: { provider } })`\n * gets this route provider (or the FakeProvider for a keyless playground), so the\n * whole authoring loop — `applyContentWithShape` included — proxies its model calls\n * through the session-gated route while the tools (search / list / apply) execute\n * client-side with the user's own session. It exposes NO `languageModel()` — the\n * conversational loop talks to the route's native chat branch directly (EC-334,\n * `useChat` + `DefaultChatTransport`), not through this provider; the provider\n * only NAMES that target ({@link AiChatTarget}) so endpoint + session headers are\n * configured once.\n *\n * Bundle-safe by construction: this module imports nothing from `ai` / `@ai-sdk/*`\n * (it only uses `fetch`), so it stays off the AI-SDK dependency edge the bundle test\n * pins — the route provider can sit on the studio critical path without pulling the\n * SDK. The capability gate passes: the route only ever fronts a gate-checked provider\n * (validated at the server mount), so the proxy declares both required capabilities.\n */\nimport { guardAiRouteFetch } from './route-fetch'\nimport type {\n  AiProvider,\n  AiProviderCapabilities,\n  GenerateStructuredRequest,\n  GenerateStructuredResult,\n} from './types'\n\n/** How extra request headers are supplied — a static set or a (possibly async) thunk. */\nexport type RouteHeaders =\n  | HeadersInit\n  | (() => HeadersInit | undefined | Promise<HeadersInit | undefined>)\n\nexport interface RouteProviderOptions {\n  /** The mounted route path/URL (default `/api/ai`). */\n  endpoint?: string\n  /**\n   * `fetch` implementation (default the global). Injected in tests. Always wrapped\n   * by {@link guardAiRouteFetch} (EC-514): an answer the route could not have\n   * produced — the SPA shell, a host 404 page — throws `AiRouteNotMountedError`.\n   */\n  fetchImpl?: typeof fetch\n  /**\n   * Extra headers per request — e.g. the studio session token the route's `getSession`\n   * checks. A thunk is re-evaluated on every call so a refreshed token is picked up.\n   */\n  headers?: RouteHeaders\n  /** Provider id recorded in provenance (default `route`). */\n  id?: string\n  /** Model id recorded in provenance (the downstream model, when the host fixes one). */\n  model?: string\n}\n\n/** Default mount path a consuming studio app exposes for {@link createAiRouteHandler}. */\nexport const DEFAULT_AI_ENDPOINT = '/api/ai'\n\n/**\n * The chat transport target (EC-334): where the panel's `useChat` posts its\n * native `{ messages, context }` requests, and which extra headers ride along\n * (the session token thunk). `createRouteProvider` exposes its own endpoint +\n * headers here, so the ONE configured provider is the single source of truth\n * for both the structured proxy and the chat transport.\n */\nexport interface AiChatTarget {\n  endpoint: string\n  headers?: RouteHeaders\n}\n\n/** An {@link AiProvider} that also names the chat transport target it fronts. */\nexport interface RouteAiProvider extends AiProvider {\n  readonly chatTarget: AiChatTarget\n}\n\n/**\n * The chat target behind a configured provider: the route provider's own\n * endpoint + headers, or the default mount path for any other provider (the\n * chat loop always talks to the mounted route — a missing mount fails loud as\n * a visible route error in the panel, never silently).\n */\nexport function resolveChatTarget(provider: AiProvider | null): AiChatTarget {\n  const candidate = (provider as Partial<RouteAiProvider> | null)?.chatTarget\n  if (candidate && typeof candidate.endpoint === 'string') return candidate\n  return { endpoint: DEFAULT_AI_ENDPOINT }\n}\n\nasync function resolveHeaders(headers: RouteHeaders | undefined): Promise<HeadersInit | undefined> {\n  if (typeof headers === 'function') return headers()\n  return headers\n}\n\n/** A structured error thrown when the route rejects (surfaced by the chat UI). */\nexport class AiRouteError extends Error {\n  constructor(\n    readonly status: number,\n    readonly code: string,\n  ) {\n    super(`AI route request failed (${status}: ${code})`)\n    this.name = 'AiRouteError'\n  }\n}\n\nasync function errorCode(response: Response): Promise<string> {\n  try {\n    const body = (await response.json()) as { error?: unknown }\n    return typeof body.error === 'string' ? body.error : 'request-failed'\n  } catch {\n    return 'request-failed'\n  }\n}\n\n/**\n * Build a route-backed {@link AiProvider}. Deterministic given a deterministic route\n * (so the FakeProvider mounted behind the route drives the whole client loop in the\n * playground). Never holds a key; never imports the AI SDK.\n */\nexport function createRouteProvider(options: RouteProviderOptions = {}): RouteAiProvider {\n  const endpoint = options.endpoint ?? DEFAULT_AI_ENDPOINT\n  const fetchImpl = guardAiRouteFetch(options.fetchImpl ?? fetch)\n\n  async function post(body: unknown): Promise<Response> {\n    const extra = await resolveHeaders(options.headers)\n    const headers = new Headers(extra)\n    headers.set('content-type', 'application/json')\n    return fetchImpl(endpoint, { method: 'POST', headers, body: JSON.stringify(body) })\n  }\n\n  return {\n    id: options.id ?? 'route',\n    ...(options.model !== undefined ? { model: options.model } : {}),\n    chatTarget: { endpoint, ...(options.headers !== undefined ? { headers: options.headers } : {}) },\n    capabilities: (): AiProviderCapabilities => ({ toolCalling: true, structuredOutput: true }),\n\n    async generateStructured(\n      request: GenerateStructuredRequest,\n    ): Promise<GenerateStructuredResult> {\n      const response = await post({ kind: 'generate', request })\n      if (!response.ok) throw new AiRouteError(response.status, await errorCode(response))\n      return (await response.json()) as GenerateStructuredResult\n    },\n  }\n}\n"]}

package/dist/lib/clipboard/paste-target.d.ts

@@ -6,15 +6,37 @@ import type { ComponentManifest } from '@elytracms/core/component-registry';
  * the anchor node's child slot when it has one, else *after* the anchor as a
  * sibling, else appended to the page root. Pure and selection-driven so the
  * canvas, the page tree, and keyboard paste all share one rule.
+ *
+ * EC-545: the resolved slot's `allow` leash is checked HERE, for the pasted
+ * subtree's root, through the same `slotAllows` the drop rule reads — so a
+ * component drag-and-drop refuses is refused by clipboard too, and a caller
+ * cannot reach an `InsertTarget` without passing the check (the rejection is a
+ * separate member of the result union, not a flag beside the target). Nested
+ * validity of the pasted subtree stays with the publish gate, exactly like a
+ * drop.
  */
 export interface PasteTarget {
+    ok: true;
     target: InsertTarget;
     /** Human label of where the paste lands (notices/debugging). */
     destinationLabel: string;
 }
+export interface PasteRejection {
+    ok: false;
+    code: 'not-allowed';
+    /** The pasted root the slot refuses. */
+    componentId: string;
+    /** The resolved slot whose `allow` list excludes it. */
+    slot: string;
+    /** Human label of the refused destination (`Section · body`). */
+    destinationLabel: string;
+}
+export type PasteResolution = PasteTarget | PasteRejection;
 export declare function resolvePasteTarget(args: {
     root: ComponentNode;
     /** The anchor node (usually the selection); `null` falls back to the root. */
     anchorId: string | null;
+    /** The pasted subtree's root component — the id the slot leash judges. */
+    componentId: string;
     getManifest: (componentId: string) => ComponentManifest | undefined;
-}): PasteTarget;
+}): PasteResolution;

package/dist/lib/clipboard/paste-target.js

@@ -1,29 +1,30 @@
 import { getNode, getParentInfo } from '@elytracms/core/project-graph';
-import { manifestRules, primaryInsertSlot } from '@elytracms/studio/lib/dnd/drop-rules';
+import { manifestRules, primaryInsertSlot, slotAllows } from '@elytracms/studio/lib/dnd/drop-rules';
 import { shortId } from '@elytracms/studio/lib/persona/labels';
 export function resolvePasteTarget(args) {
-    const { root, getManifest } = args;
+    const { root, componentId, getManifest } = args;
     const anchor = args.anchorId !== null ? getNode(root, args.anchorId) : undefined;
     const node = anchor ?? root;
+    const leashed = (slot, slotRule, target, destinationLabel) => slotAllows(slotRule, componentId)
+        ? { ok: true, target, destinationLabel }
+        : { ok: false, code: 'not-allowed', componentId, slot, destinationLabel };
     // EC-386: the shared slot rule (`primaryInsertSlot` over the merged
     // `manifestRules` vocabulary) — a blocks-prop region (e.g. a Section's `body`)
     // receives the paste exactly like the insert dialog and a DnD `into`.
     const manifest = getManifest(node.componentId);
     const childSlot = primaryInsertSlot(manifestRules(manifest));
     if (childSlot) {
-        return {
-            target: { parentId: node.id, slot: childSlot.name },
-            destinationLabel: `${shortId(node.componentId)} · ${childSlot.name}`,
-        };
+        return leashed(childSlot.name, childSlot, { parentId: node.id, slot: childSlot.name }, `${shortId(node.componentId)} · ${childSlot.name}`);
     }
     const info = getParentInfo(root, node.id);
     if (info) {
-        return {
-            target: { parentId: info.parent.id, slot: info.slot, index: info.index + 1 },
-            destinationLabel: `${shortId(info.parent.componentId)} · ${info.slot}`,
-        };
+        // A sibling paste is governed by the PARENT's slot leash (the drop rule's
+        // before/after case). An unknown parent manifest imposes no allow-list;
+        // validation owns that issue.
+        const parentSlot = manifestRules(getManifest(info.parent.componentId))?.slots.find((s) => s.name === info.slot);
+        return leashed(info.slot, parentSlot, { parentId: info.parent.id, slot: info.slot, index: info.index + 1 }, `${shortId(info.parent.componentId)} · ${info.slot}`);
     }
     // Leaf root with no declared slots (degenerate graphs): append to `children`.
-    return { target: { parentId: root.id, slot: 'children' }, destinationLabel: 'root' };
+    return { ok: true, target: { parentId: root.id, slot: 'children' }, destinationLabel: 'root' };
 }
 //# sourceMappingURL=paste-target.js.map

package/dist/lib/clipboard/paste-target.js.map

@@ -1 +1 @@
-{"version":3,"file":"paste-target.js","sourceRoot":"","sources":["../../../src/lib/clipboard/paste-target.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AAGtE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAA;AACvF,OAAO,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAA;AAgB9D,MAAM,UAAU,kBAAkB,CAAC,IAKlC;IACC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,IAAI,CAAA;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAChF,MAAM,IAAI,GAAG,MAAM,IAAI,IAAI,CAAA;IAE3B,oEAAoE;IACpE,+EAA+E;IAC/E,sEAAsE;IACtE,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC9C,MAAM,SAAS,GAAG,iBAAiB,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC5D,IAAI,SAAS,EAAE,CAAC;QACd,OAAO;YACL,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE;YACnD,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE;SACrE,CAAA;IACH,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;IACzC,IAAI,IAAI,EAAE,CAAC;QACT,OAAO;YACL,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE;YAC5E,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE;SACvE,CAAA;IACH,CAAC;IAED,8EAA8E;IAC9E,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAA;AACtF,CAAC","sourcesContent":["import { getNode, getParentInfo } from '@elytracms/core/project-graph'\nimport type { ComponentNode, InsertTarget } from '@elytracms/core/project-graph'\nimport type { ComponentManifest } from '@elytracms/core/component-registry'\nimport { manifestRules, primaryInsertSlot } from '@elytracms/studio/lib/dnd/drop-rules'\nimport { shortId } from '@elytracms/studio/lib/persona/labels'\n\n/**\n * Paste landing-spot resolution (EC-175) — the same placement rule the Insert\n * dialog uses (`insert-context.ts`): a pasted subtree lands *into*\n * the anchor node's child slot when it has one, else *after* the anchor as a\n * sibling, else appended to the page root. Pure and selection-driven so the\n * canvas, the page tree, and keyboard paste all share one rule.\n */\n\nexport interface PasteTarget {\n  target: InsertTarget\n  /** Human label of where the paste lands (notices/debugging). */\n  destinationLabel: string\n}\n\nexport function resolvePasteTarget(args: {\n  root: ComponentNode\n  /** The anchor node (usually the selection); `null` falls back to the root. */\n  anchorId: string | null\n  getManifest: (componentId: string) => ComponentManifest | undefined\n}): PasteTarget {\n  const { root, getManifest } = args\n  const anchor = args.anchorId !== null ? getNode(root, args.anchorId) : undefined\n  const node = anchor ?? root\n\n  // EC-386: the shared slot rule (`primaryInsertSlot` over the merged\n  // `manifestRules` vocabulary) — a blocks-prop region (e.g. a Section's `body`)\n  // receives the paste exactly like the insert dialog and a DnD `into`.\n  const manifest = getManifest(node.componentId)\n  const childSlot = primaryInsertSlot(manifestRules(manifest))\n  if (childSlot) {\n    return {\n      target: { parentId: node.id, slot: childSlot.name },\n      destinationLabel: `${shortId(node.componentId)} · ${childSlot.name}`,\n    }\n  }\n\n  const info = getParentInfo(root, node.id)\n  if (info) {\n    return {\n      target: { parentId: info.parent.id, slot: info.slot, index: info.index + 1 },\n      destinationLabel: `${shortId(info.parent.componentId)} · ${info.slot}`,\n    }\n  }\n\n  // Leaf root with no declared slots (degenerate graphs): append to `children`.\n  return { target: { parentId: root.id, slot: 'children' }, destinationLabel: 'root' }\n}\n"]}
+{"version":3,"file":"paste-target.js","sourceRoot":"","sources":["../../../src/lib/clipboard/paste-target.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AAGtE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,sCAAsC,CAAA;AAEnG,OAAO,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAA;AAsC9D,MAAM,UAAU,kBAAkB,CAAC,IAOlC;IACC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,IAAI,CAAA;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAChF,MAAM,IAAI,GAAG,MAAM,IAAI,IAAI,CAAA;IAE3B,MAAM,OAAO,GAAG,CACd,IAAY,EACZ,QAA8B,EAC9B,MAAoB,EACpB,gBAAwB,EACP,EAAE,CACnB,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC;QAC/B,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE;QACxC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAA;IAE7E,oEAAoE;IACpE,+EAA+E;IAC/E,sEAAsE;IACtE,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC9C,MAAM,SAAS,GAAG,iBAAiB,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC5D,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,OAAO,CACZ,SAAS,CAAC,IAAI,EACd,SAAS,EACT,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,EAC3C,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CACnD,CAAA;IACH,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;IACzC,IAAI,IAAI,EAAE,CAAC;QACT,0EAA0E;QAC1E,wEAAwE;QACxE,8BAA8B;QAC9B,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/G,OAAO,OAAO,CACZ,IAAI,CAAC,IAAI,EACT,UAAU,EACV,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,EACpE,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CACrD,CAAA;IACH,CAAC;IAED,8EAA8E;IAC9E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAA;AAChG,CAAC","sourcesContent":["import { getNode, getParentInfo } from '@elytracms/core/project-graph'\nimport type { ComponentNode, InsertTarget } from '@elytracms/core/project-graph'\nimport type { ComponentManifest } from '@elytracms/core/component-registry'\nimport { manifestRules, primaryInsertSlot, slotAllows } from '@elytracms/studio/lib/dnd/drop-rules'\nimport type { SlotRule } from '@elytracms/studio/lib/dnd/drop-rules'\nimport { shortId } from '@elytracms/studio/lib/persona/labels'\n\n/**\n * Paste landing-spot resolution (EC-175) — the same placement rule the Insert\n * dialog uses (`insert-context.ts`): a pasted subtree lands *into*\n * the anchor node's child slot when it has one, else *after* the anchor as a\n * sibling, else appended to the page root. Pure and selection-driven so the\n * canvas, the page tree, and keyboard paste all share one rule.\n *\n * EC-545: the resolved slot's `allow` leash is checked HERE, for the pasted\n * subtree's root, through the same `slotAllows` the drop rule reads — so a\n * component drag-and-drop refuses is refused by clipboard too, and a caller\n * cannot reach an `InsertTarget` without passing the check (the rejection is a\n * separate member of the result union, not a flag beside the target). Nested\n * validity of the pasted subtree stays with the publish gate, exactly like a\n * drop.\n */\n\nexport interface PasteTarget {\n  ok: true\n  target: InsertTarget\n  /** Human label of where the paste lands (notices/debugging). */\n  destinationLabel: string\n}\n\nexport interface PasteRejection {\n  ok: false\n  code: 'not-allowed'\n  /** The pasted root the slot refuses. */\n  componentId: string\n  /** The resolved slot whose `allow` list excludes it. */\n  slot: string\n  /** Human label of the refused destination (`Section · body`). */\n  destinationLabel: string\n}\n\nexport type PasteResolution = PasteTarget | PasteRejection\n\nexport function resolvePasteTarget(args: {\n  root: ComponentNode\n  /** The anchor node (usually the selection); `null` falls back to the root. */\n  anchorId: string | null\n  /** The pasted subtree's root component — the id the slot leash judges. */\n  componentId: string\n  getManifest: (componentId: string) => ComponentManifest | undefined\n}): PasteResolution {\n  const { root, componentId, getManifest } = args\n  const anchor = args.anchorId !== null ? getNode(root, args.anchorId) : undefined\n  const node = anchor ?? root\n\n  const leashed = (\n    slot: string,\n    slotRule: SlotRule | undefined,\n    target: InsertTarget,\n    destinationLabel: string,\n  ): PasteResolution =>\n    slotAllows(slotRule, componentId)\n      ? { ok: true, target, destinationLabel }\n      : { ok: false, code: 'not-allowed', componentId, slot, destinationLabel }\n\n  // EC-386: the shared slot rule (`primaryInsertSlot` over the merged\n  // `manifestRules` vocabulary) — a blocks-prop region (e.g. a Section's `body`)\n  // receives the paste exactly like the insert dialog and a DnD `into`.\n  const manifest = getManifest(node.componentId)\n  const childSlot = primaryInsertSlot(manifestRules(manifest))\n  if (childSlot) {\n    return leashed(\n      childSlot.name,\n      childSlot,\n      { parentId: node.id, slot: childSlot.name },\n      `${shortId(node.componentId)} · ${childSlot.name}`,\n    )\n  }\n\n  const info = getParentInfo(root, node.id)\n  if (info) {\n    // A sibling paste is governed by the PARENT's slot leash (the drop rule's\n    // before/after case). An unknown parent manifest imposes no allow-list;\n    // validation owns that issue.\n    const parentSlot = manifestRules(getManifest(info.parent.componentId))?.slots.find((s) => s.name === info.slot)\n    return leashed(\n      info.slot,\n      parentSlot,\n      { parentId: info.parent.id, slot: info.slot, index: info.index + 1 },\n      `${shortId(info.parent.componentId)} · ${info.slot}`,\n    )\n  }\n\n  // Leaf root with no declared slots (degenerate graphs): append to `children`.\n  return { ok: true, target: { parentId: root.id, slot: 'children' }, destinationLabel: 'root' }\n}\n"]}

package/dist/lib/cms/document-gate.d.ts

@@ -10,17 +10,26 @@ import type { CmsDocument, CmsValidationIssue } from '@elytracms/core/cms-core';
  * `createStudioOperations` hands this module's reader to the operations layer
  * once, at bootstrap.
  *
- * The reader deliberately returns `undefined` when nothing is registered rather
- * than an empty issue list: `undefined` means "no session context here" and puts
- * the operations gate on its documented adapter-record fallback, whereas `[]`
- * would silently claim the document is clean. A gate that cannot see must say so,
- * not pass.
+ * **EC-546 — a gate that cannot see says so.** The first cut had the reader return
+ * `undefined` with nothing registered, meaning "no session context here", and
+ * the operations gate answered that by falling back to an optionless
+ * `validateDocument` over the adapter's schema record: scalar rules only, no
+ * store, no locale config, no composition or embed leash. Measured: a document
+ * carrying a component outside its slot's `allow` published through
+ * `createStudioOperations` whenever the stack was empty. That is the exact
+ * weaker, mode-dependent gate EC-497 removed, kept alive by a mount-state side
+ * channel. So the reader now answers with issues ONLY: with nothing registered it
+ * returns one blocking `error` issue — the publish is refused and the refusal is
+ * visible — and the operations layer no longer has a fallback to take (its
+ * `DocumentValidator` cannot return `undefined`).
  *
  * This module imports nothing but types, so hanging the seam off it never drags
  * the CMS session (or the component registry behind the composition validators)
  * into the operations bootstrap's module graph.
  */
 export type SessionDocumentValidator = (document: CmsDocument) => readonly CmsValidationIssue[];
+/** The catalog key of the refusal the reader emits with no session mounted (EC-546). */
+export declare const NO_VALIDATION_SESSION_MESSAGE_KEY = "cms.issueMessage.noValidationSession";
 /** Publish the session's canonical document validator (`null` clears the stack). */
 export declare function setSessionDocumentValidator(next: SessionDocumentValidator | null): void;
 /**
@@ -30,8 +39,9 @@ export declare function setSessionDocumentValidator(next: SessionDocumentValidat
  */
 export declare function clearSessionDocumentValidator(owned: SessionDocumentValidator): void;
 /**
- * The reader handed to `createOperations`. `undefined` = no session ⇒ the gate
- * falls back; see {@link SessionDocumentValidator} and the operations layer's
- * `DocumentValidator`.
+ * The reader handed to `createOperations`. The innermost session's verdict, or —
+ * with no session mounted — the blocking refusal described on
+ * {@link SessionDocumentValidator}. Never `undefined`: the operations layer's
+ * `DocumentValidator` has no fallback to offer and no longer accepts one (EC-546).
  */
-export declare function sessionValidateDocument(document: CmsDocument): readonly CmsValidationIssue[] | undefined;
+export declare function sessionValidateDocument(document: CmsDocument): readonly CmsValidationIssue[];

package/dist/lib/cms/document-gate.js

@@ -8,6 +8,25 @@
  * published. Popping restores the outer session instead.
  */
 const registered = [];
+/** The catalog key of the refusal the reader emits with no session mounted (EC-546). */
+export const NO_VALIDATION_SESSION_MESSAGE_KEY = 'cms.issueMessage.noValidationSession';
+/**
+ * The verdict with no session mounted: one blocking issue, never a pass and never
+ * `undefined`. `custom-validation` is the code for a rule the engine's field
+ * vocabulary does not name — this is a host rule ("publish only through a mounted
+ * session"), not a finding about the document — and the message carries the
+ * meaning. Published via the same `messageRef` the engine's issues use, so the
+ * studio's operation-error banner renders it in the active locale (EC-494).
+ */
+const NO_SESSION_REFUSAL = [
+    {
+        code: 'custom-validation',
+        severity: 'error',
+        message: 'No validation session is mounted — refusing to publish unvalidated.',
+        messageRef: { key: NO_VALIDATION_SESSION_MESSAGE_KEY },
+        path: [],
+    },
+];
 /** Publish the session's canonical document validator (`null` clears the stack). */
 export function setSessionDocumentValidator(next) {
     if (next === null) {
@@ -30,11 +49,13 @@ export function clearSessionDocumentValidator(owned) {
         registered.splice(at, 1);
 }
 /**
- * The reader handed to `createOperations`. `undefined` = no session ⇒ the gate
- * falls back; see {@link SessionDocumentValidator} and the operations layer's
- * `DocumentValidator`.
+ * The reader handed to `createOperations`. The innermost session's verdict, or —
+ * with no session mounted — the blocking refusal described on
+ * {@link SessionDocumentValidator}. Never `undefined`: the operations layer's
+ * `DocumentValidator` has no fallback to offer and no longer accepts one (EC-546).
  */
 export function sessionValidateDocument(document) {
-    return registered.at(-1)?.(document);
+    const session = registered.at(-1);
+    return session ? session(document) : NO_SESSION_REFUSAL;
 }
 //# sourceMappingURL=document-gate.js.map

package/dist/lib/cms/document-gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"document-gate.js","sourceRoot":"","sources":["../../../src/lib/cms/document-gate.ts"],"names":[],"mappings":"AAyBA;;;;;;;;GAQG;AACH,MAAM,UAAU,GAA+B,EAAE,CAAA;AAEjD,oFAAoF;AACpF,MAAM,UAAU,2BAA2B,CAAC,IAAqC;IAC/E,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,UAAU,CAAC,MAAM,GAAG,CAAC,CAAA;QACrB,OAAM;IACR,CAAC;IACD,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACnC,IAAI,EAAE,IAAI,CAAC;QAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;IACrC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACvB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,KAA+B;IAC3E,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACpC,IAAI,EAAE,IAAI,CAAC;QAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAqB;IAErB,OAAO,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAA;AACtC,CAAC","sourcesContent":["import type { CmsDocument, CmsValidationIssue } from '@elytracms/core/cms-core'\n\n/**\n * The publish-gate seam (EC-497) — a framework-free module store, the same shape\n * as the current-document seam (`lib/ai-current-document`).\n *\n * `createOperations` is a module singleton built long before (and independently\n * of) any React tree, while gate-strength validation needs the live CMS session:\n * its document store, its asset oracle, its published-ness pointer. So the CMS\n * session PUBLISHES a validator here while mounted, and\n * `createStudioOperations` hands this module's reader to the operations layer\n * once, at bootstrap.\n *\n * The reader deliberately returns `undefined` when nothing is registered rather\n * than an empty issue list: `undefined` means \"no session context here\" and puts\n * the operations gate on its documented adapter-record fallback, whereas `[]`\n * would silently claim the document is clean. A gate that cannot see must say so,\n * not pass.\n *\n * This module imports nothing but types, so hanging the seam off it never drags\n * the CMS session (or the component registry behind the composition validators)\n * into the operations bootstrap's module graph.\n */\nexport type SessionDocumentValidator = (document: CmsDocument) => readonly CmsValidationIssue[]\n\n/**\n * Registered sessions, innermost LAST — a stack, not a single slot, because more\n * than one `CmsProvider` can be mounted at a time: the \"Use in document…\"\n * transfer dialog mounts its own over the app's\n * (`components/transfer-dialog.tsx:92`). With a single slot, closing that dialog\n * would clear the seam and silently drop the publish gate back to its fallback\n * for the rest of the app's life — a regression invisible until something\n * published. Popping restores the outer session instead.\n */\nconst registered: SessionDocumentValidator[] = []\n\n/** Publish the session's canonical document validator (`null` clears the stack). */\nexport function setSessionDocumentValidator(next: SessionDocumentValidator | null): void {\n  if (next === null) {\n    registered.length = 0\n    return\n  }\n  const at = registered.indexOf(next)\n  if (at >= 0) registered.splice(at, 1)\n  registered.push(next)\n}\n\n/**\n * Remove this validator — the unmount race guard. Removing an INNER session\n * leaves the outer one in place; removing one that already left is a no-op (a\n * remount registers the new validator before the old effect's cleanup runs).\n */\nexport function clearSessionDocumentValidator(owned: SessionDocumentValidator): void {\n  const at = registered.indexOf(owned)\n  if (at >= 0) registered.splice(at, 1)\n}\n\n/**\n * The reader handed to `createOperations`. `undefined` = no session ⇒ the gate\n * falls back; see {@link SessionDocumentValidator} and the operations layer's\n * `DocumentValidator`.\n */\nexport function sessionValidateDocument(\n  document: CmsDocument,\n): readonly CmsValidationIssue[] | undefined {\n  return registered.at(-1)?.(document)\n}\n"]}
+{"version":3,"file":"document-gate.js","sourceRoot":"","sources":["../../../src/lib/cms/document-gate.ts"],"names":[],"mappings":"AAgCA;;;;;;;;GAQG;AACH,MAAM,UAAU,GAA+B,EAAE,CAAA;AAEjD,wFAAwF;AACxF,MAAM,CAAC,MAAM,iCAAiC,GAAG,sCAAsC,CAAA;AAEvF;;;;;;;GAOG;AACH,MAAM,kBAAkB,GAAkC;IACxD;QACE,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,qEAAqE;QAC9E,UAAU,EAAE,EAAE,GAAG,EAAE,iCAAiC,EAAE;QACtD,IAAI,EAAE,EAAE;KACT;CACF,CAAA;AAED,oFAAoF;AACpF,MAAM,UAAU,2BAA2B,CAAC,IAAqC;IAC/E,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,UAAU,CAAC,MAAM,GAAG,CAAC,CAAA;QACrB,OAAM;IACR,CAAC;IACD,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACnC,IAAI,EAAE,IAAI,CAAC;QAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;IACrC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACvB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,KAA+B;IAC3E,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACpC,IAAI,EAAE,IAAI,CAAC;QAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAqB;IAC3D,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACjC,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAA;AACzD,CAAC","sourcesContent":["import type { CmsDocument, CmsValidationIssue } from '@elytracms/core/cms-core'\n\n/**\n * The publish-gate seam (EC-497) — a framework-free module store, the same shape\n * as the current-document seam (`lib/ai-current-document`).\n *\n * `createOperations` is a module singleton built long before (and independently\n * of) any React tree, while gate-strength validation needs the live CMS session:\n * its document store, its asset oracle, its published-ness pointer. So the CMS\n * session PUBLISHES a validator here while mounted, and\n * `createStudioOperations` hands this module's reader to the operations layer\n * once, at bootstrap.\n *\n * **EC-546 — a gate that cannot see says so.** The first cut had the reader return\n * `undefined` with nothing registered, meaning \"no session context here\", and\n * the operations gate answered that by falling back to an optionless\n * `validateDocument` over the adapter's schema record: scalar rules only, no\n * store, no locale config, no composition or embed leash. Measured: a document\n * carrying a component outside its slot's `allow` published through\n * `createStudioOperations` whenever the stack was empty. That is the exact\n * weaker, mode-dependent gate EC-497 removed, kept alive by a mount-state side\n * channel. So the reader now answers with issues ONLY: with nothing registered it\n * returns one blocking `error` issue — the publish is refused and the refusal is\n * visible — and the operations layer no longer has a fallback to take (its\n * `DocumentValidator` cannot return `undefined`).\n *\n * This module imports nothing but types, so hanging the seam off it never drags\n * the CMS session (or the component registry behind the composition validators)\n * into the operations bootstrap's module graph.\n */\nexport type SessionDocumentValidator = (document: CmsDocument) => readonly CmsValidationIssue[]\n\n/**\n * Registered sessions, innermost LAST — a stack, not a single slot, because more\n * than one `CmsProvider` can be mounted at a time: the \"Use in document…\"\n * transfer dialog mounts its own over the app's\n * (`components/transfer-dialog.tsx:92`). With a single slot, closing that dialog\n * would clear the seam and silently drop the publish gate back to its fallback\n * for the rest of the app's life — a regression invisible until something\n * published. Popping restores the outer session instead.\n */\nconst registered: SessionDocumentValidator[] = []\n\n/** The catalog key of the refusal the reader emits with no session mounted (EC-546). */\nexport const NO_VALIDATION_SESSION_MESSAGE_KEY = 'cms.issueMessage.noValidationSession'\n\n/**\n * The verdict with no session mounted: one blocking issue, never a pass and never\n * `undefined`. `custom-validation` is the code for a rule the engine's field\n * vocabulary does not name — this is a host rule (\"publish only through a mounted\n * session\"), not a finding about the document — and the message carries the\n * meaning. Published via the same `messageRef` the engine's issues use, so the\n * studio's operation-error banner renders it in the active locale (EC-494).\n */\nconst NO_SESSION_REFUSAL: readonly CmsValidationIssue[] = [\n  {\n    code: 'custom-validation',\n    severity: 'error',\n    message: 'No validation session is mounted — refusing to publish unvalidated.',\n    messageRef: { key: NO_VALIDATION_SESSION_MESSAGE_KEY },\n    path: [],\n  },\n]\n\n/** Publish the session's canonical document validator (`null` clears the stack). */\nexport function setSessionDocumentValidator(next: SessionDocumentValidator | null): void {\n  if (next === null) {\n    registered.length = 0\n    return\n  }\n  const at = registered.indexOf(next)\n  if (at >= 0) registered.splice(at, 1)\n  registered.push(next)\n}\n\n/**\n * Remove this validator — the unmount race guard. Removing an INNER session\n * leaves the outer one in place; removing one that already left is a no-op (a\n * remount registers the new validator before the old effect's cleanup runs).\n */\nexport function clearSessionDocumentValidator(owned: SessionDocumentValidator): void {\n  const at = registered.indexOf(owned)\n  if (at >= 0) registered.splice(at, 1)\n}\n\n/**\n * The reader handed to `createOperations`. The innermost session's verdict, or —\n * with no session mounted — the blocking refusal described on\n * {@link SessionDocumentValidator}. Never `undefined`: the operations layer's\n * `DocumentValidator` has no fallback to offer and no longer accepts one (EC-546).\n */\nexport function sessionValidateDocument(document: CmsDocument): readonly CmsValidationIssue[] {\n  const session = registered.at(-1)\n  return session ? session(document) : NO_SESSION_REFUSAL\n}\n"]}

package/dist/lib/engine-version.d.ts

@@ -0,0 +1,16 @@
+/**
+ * The engine version this studio build was compiled from (EC-552) — the client-side
+ * half of the deployed-functions version handshake: the boot gate compares it against
+ * what `delivery:engineVersion` answers from the deployment.
+ *
+ * A MIRROR of `package.json`'s `version`, not the declaration itself: client source
+ * cannot import `../../package.json` (outside the tsc build's `rootDir`; moving the
+ * root would reshape `dist` and every export path). The parity test beside this file
+ * fs-reads the real declaration and fails `pnpm verify` the moment the two diverge,
+ * so a release cannot ship with a stale mirror. Release staging bumps this alongside
+ * the five `package.json` versions and the template pins.
+ *
+ * (The convex-side stamp does NOT read this mirror — `convex/delivery.ts` imports the
+ * package.json declaration directly; its bundler allows what tsc's rootDir forbids.)
+ */
+export declare const ENGINE_VERSION = "0.0.86";

package/dist/lib/engine-version.js

@@ -0,0 +1,17 @@
+/**
+ * The engine version this studio build was compiled from (EC-552) — the client-side
+ * half of the deployed-functions version handshake: the boot gate compares it against
+ * what `delivery:engineVersion` answers from the deployment.
+ *
+ * A MIRROR of `package.json`'s `version`, not the declaration itself: client source
+ * cannot import `../../package.json` (outside the tsc build's `rootDir`; moving the
+ * root would reshape `dist` and every export path). The parity test beside this file
+ * fs-reads the real declaration and fails `pnpm verify` the moment the two diverge,
+ * so a release cannot ship with a stale mirror. Release staging bumps this alongside
+ * the five `package.json` versions and the template pins.
+ *
+ * (The convex-side stamp does NOT read this mirror — `convex/delivery.ts` imports the
+ * package.json declaration directly; its bundler allows what tsc's rootDir forbids.)
+ */
+export const ENGINE_VERSION = '0.0.86';
+//# sourceMappingURL=engine-version.js.map

package/dist/lib/engine-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-version.js","sourceRoot":"","sources":["../../src/lib/engine-version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,QAAQ,CAAA","sourcesContent":["/**\n * The engine version this studio build was compiled from (EC-552) — the client-side\n * half of the deployed-functions version handshake: the boot gate compares it against\n * what `delivery:engineVersion` answers from the deployment.\n *\n * A MIRROR of `package.json`'s `version`, not the declaration itself: client source\n * cannot import `../../package.json` (outside the tsc build's `rootDir`; moving the\n * root would reshape `dist` and every export path). The parity test beside this file\n * fs-reads the real declaration and fails `pnpm verify` the moment the two diverge,\n * so a release cannot ship with a stale mirror. Release staging bumps this alongside\n * the five `package.json` versions and the template pins.\n *\n * (The convex-side stamp does NOT read this mirror — `convex/delivery.ts` imports the\n * package.json declaration directly; its bundler allows what tsc's rootDir forbids.)\n */\nexport const ENGINE_VERSION = '0.0.86'\n"]}

package/dist/lib/i18n/messages.de.js

@@ -535,6 +535,7 @@ export const deMessages = {
     'cms.issueMessage.preConvergenceV1': 'Das Feld „{field}“ enthält eine Inhaltsform von vor der Konvergenz (die v1-Hülle „{ version, doc }“) — die Engine liest nur noch die konvergierte Sequenz „{ version: 2, content }“. Dieser Inhalt muss neu eingespielt werden (Re-Seed).',
     'cms.issueMessage.preConvergenceBareBlocks': 'Das Feld „{field}“ enthält eine Inhaltsform von vor der Konvergenz (eine blanke Komponentenliste) — die Engine liest nur noch die konvergierte Sequenz „{ version: 2, content }“. Dieser Inhalt muss neu eingespielt werden (Re-Seed).',
     'cms.issueMessage.preConvergencePlaintext': 'Das Feld „{field}“ enthält eine Inhaltsform von vor der Konvergenz (unstrukturierter Alttext) — die Engine liest nur noch die konvergierte Sequenz „{ version: 2, content }“. Dieser Inhalt muss neu eingespielt werden (Re-Seed).',
+    'cms.issueMessage.noValidationSession': 'Es ist keine Validierungssitzung eingebunden — die Veröffentlichung ohne Prüfung wird verweigert.',
     'cms.issueMessage.richTextHoldsArray': 'Das Rich-Text-Feld „{field}“ erwartet einen Rich-Text-Wert („{ version: 2, content }“), enthält aber ein Array.',
     'cms.issueMessage.richTextHoldsBareDoc': 'Das Rich-Text-Feld „{field}“ erwartet einen Rich-Text-Wert („{ version: 2, content }“), enthält aber ein blankes Rich-Text-Dokument ohne die Hülle „{ version: 2, content }“.',
     'cms.issueMessage.richTextHoldsObject': 'Das Rich-Text-Feld „{field}“ erwartet einen Rich-Text-Wert („{ version: 2, content }“), enthält aber ein Objekt mit den Schlüsseln „{keys}“.',
@@ -1071,6 +1072,7 @@ export const deMessages = {
     'builder.clipboard.copied': '{label} kopiert',
     'builder.clipboard.cutNotice': '{label} ausgeschnitten',
     'builder.clipboard.pastedInto': '{summary} · in {destination}',
+    'builder.clipboard.notAllowed': '{component} kann nicht in {destination} eingefügt werden — der Slot lässt es nicht zu.',
     'builder.clipboard.issueComponent': 'Komponente',
     'builder.clipboard.issueBinding': 'Bindung',
     // EC-494 — Zwischenablage-Fehler aus der Engine plus der studio-seitige Einfüge-Diff.
@@ -1158,6 +1160,7 @@ export const deMessages = {
     'builder.canvasTheme.stylesheetErrorNotice': 'Das Canvas-Stylesheet konnte nicht geladen werden — Blöcke werden ungestylt dargestellt. Prüfen Sie den canvas.css-Build des Studios.',
     'builder.canvasTheme.noThemeTokensNotice': 'Das Canvas-Stylesheet definiert keine Theme-Tokens. canvas.css sollte den Full-Tailwind-Theme-Einstieg der Site importieren (siehe docs/theming.md).',
     'builder.canvasTheme.noStylesheetNotice': 'Es ist kein Canvas-Stylesheet konfiguriert — Blöcke werden ungestylt dargestellt. Die App muss eines über setCanvasStylesheetUrl bereitstellen (das create-elytra-Template verdrahtet das).',
+    'builder.composition.preservedNotice': 'Diese Komposition enthält {count} Textelement(e), die der Canvas noch nicht darstellen kann. Sie behalten ihre Position zwischen den Blöcken, bleiben von Canvas-Änderungen unberührt und werden normal veröffentlicht.',
     'builder.spacing.gapAfterChild': 'Abstand nach Element {index}',
     'builder.richText.toolbarLabel': 'Textformatierung',
     'builder.richText.linkPlaceholder': 'https://… (leer entfernt)',
@@ -1266,6 +1269,7 @@ export const deMessages = {
     'ai.proposal.expandReview': 'Prüfansicht erweitern',
     'ai.proposal.collapseReview': 'Prüfansicht schließen',
     'ai.error.route': 'Der Assistent ist derzeit nicht verfügbar. Bitte versuchen Sie es erneut.',
+    'ai.error.routeNotMounted': 'Unter {endpoint} ist keine Assistenten-Route eingebunden – die Anfrage wurde von der Seite statt von der KI-Route beantwortet. Prüfen Sie die Routen-Einbindung des Hosts; auf einem Dev-Server fehlt möglicherweise die Build-Ausgabe des Studios.',
     'ai.error.generic': 'Etwas ist schiefgelaufen. Bitte versuchen Sie es erneut.',
     'ai.error.applyFailed': 'Der Entwurf konnte nicht übernommen werden.',
     'ai.error.applyInvalid': 'Der Vorschlag passt nicht mehr zum aktuellen Dokument: {issues}',