@elytracms/studio 0.0.86 → 0.0.87

package/dist/lib/locale/fallback.js

@@ -1,4 +1,5 @@
 import { documentDefaultLocale, isFieldLocalized, resolveField } from '@elytracms/core/cms-core';
+import { isEmptyBlockSequence } from '@elytracms/core/project-graph';
 /** True when the document stores an explicit variant of `field` for `locale`. */
 export function hasLocaleVariant(doc, fieldName, locale) {
     const bag = doc.localized?.[locale];
@@ -73,9 +74,14 @@ export function activeLocaleValues(doc, locale) {
 // store a cleared value as `undefined`, which DELETES the key — so clearing a
 // localized field reconnects it to base rather than diverging it to empty.
 // ───────────────────────────────────────────────────────────────────────────
-/** The "no value" sentinels the built-in controls store (nothing to fill from). */
+/**
+ * The "no value" sentinels the built-in controls store (nothing to fill from) —
+ * including the empty v2 sequence a cleared canvas writes (EC-575, the same
+ * project-graph rule `required` reads). Filling from it would only diverge the
+ * locale to an empty value, the state this model deliberately cannot represent.
+ */
 function isBlankValue(value) {
-    return value === undefined || value === null || value === '';
+    return value === undefined || value === null || value === '' || isEmptyBlockSequence(value);
 }
 /** Derive the connected/diverged state of `field` in `locale` (EC-318). */
 export function fieldConnection(collection, doc, fieldName, locale, config) {

package/dist/lib/locale/fallback.js.map

@@ -1 +1 @@
-{"version":3,"file":"fallback.js","sourceRoot":"","sources":["../../../src/lib/locale/fallback.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAmBhG,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,GAAgB,EAAE,SAAiB,EAAE,MAAc;IAClF,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAA;IACnC,OAAO,GAAG,KAAK,SAAS,IAAI,SAAS,IAAI,GAAG,CAAA;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAAyB,EACzB,GAAgB,EAChB,SAAiB,EACjB,MAAc,EACd,MAAoB;IAEpB,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IACzD,IAAI,gBAAgB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IACzD,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;IACzE,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IACnE,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,eAAe,EAAE,MAAM,EAAE,CAAA;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAyB,EACzB,GAAgB,EAChB,SAAiB,EACjB,MAAc,EACd,MAAoB;IAEpB,OAAO;QACL,KAAK,EAAE,YAAY,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK;QACrE,QAAQ,EAAE,sBAAsB,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC;KAC7E,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAAyB,EACzB,GAAgB,EAChB,SAAiB,EACjB,MAAc,EACd,MAAoB;IAEpB,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC;QAAE,OAAO,KAAK,CAAA;IAC1D,IAAI,MAAM,KAAK,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC;QAAE,OAAO,KAAK,CAAA;IAC/D,OAAO,CAAC,gBAAgB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;AAClD,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,MAAM,CAAC,WAAW,EAAE,CAAA;AAC7B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAgB,EAAE,MAAc;IACjE,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAA;AAC9D,CAAC;AAED,8EAA8E;AAC9E,4BAA4B;AAC5B,EAAE;AACF,kFAAkF;AAClF,0EAA0E;AAC1E,gFAAgF;AAChF,4EAA4E;AAC5E,mFAAmF;AACnF,gEAAgE;AAChE,EAAE;AACF,4EAA4E;AAC5E,kFAAkF;AAClF,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAE9E,mFAAmF;AACnF,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAAA;AAC9D,CAAC;AAmBD,2EAA2E;AAC3E,MAAM,UAAU,eAAe,CAC7B,UAAyB,EACzB,GAAgB,EAChB,SAAiB,EACjB,MAAc,EACd,MAAoB;IAEpB,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IACzD,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IACrD,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,IAAI,CAAA;IACtC,MAAM,SAAS,GAAG,YAAY,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,KAAK,CAAA;IACpF,OAAO;QACL,UAAU;QACV,SAAS,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC;QACpD,SAAS;QACT,eAAe,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC;KAC1C,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,UAAyB,EACzB,GAAgB,EAChB,SAAiB,EACjB,MAAc,EACd,KAAc;IAEd,IAAI,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAA;QACxD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC,SAAS,CAAC,CAAA;;YAC/C,SAAS,CAAC,SAAS,CAAC,GAAG,KAAK,CAAA;QACjC,OAAO,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,CAAA;IACzE,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,CAAA;IAChC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAA;;QAC5C,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAA;IAC9B,OAAO,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,CAAA;AAC3B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAyB,EACzB,GAAgB,EAChB,SAAiB,EACjB,MAAc,EACd,MAAoB;IAEpB,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9E,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,eAAe;QAAE,OAAO,GAAG,CAAA;IAC1D,OAAO,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,CAAA;AAChF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAyB,EACzB,GAAgB,EAChB,SAAiB,EACjB,MAAc;IAEd,OAAO,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;AACrE,CAAC","sourcesContent":["import { documentDefaultLocale, isFieldLocalized, resolveField } from '@elytracms/core/cms-core'\nimport type { CmsDocument, CollectionDef, Locale, LocaleConfig } from '@elytracms/core/cms-core'\n\n/**\n * Fallback visibility (EC-176) — the pure \"is this displayed value a\n * fallback?\" decision the CMS table cells, detail-editor fields, and the\n * builder's Content tab all share. One function answers it, so a value is\n * either labeled everywhere or a real translation everywhere — never\n * silently mixed.\n */\n\n/** A displayed value that came from the fallback locale, not the active one. */\nexport interface DisplayedFallback {\n  /** The locale the rendered value was actually read from. */\n  sourceLocale: Locale\n  /** The locale the surface asked for (the ambient active locale). */\n  requestedLocale: Locale\n}\n\n/** True when the document stores an explicit variant of `field` for `locale`. */\nexport function hasLocaleVariant(doc: CmsDocument, fieldName: string, locale: Locale): boolean {\n  const bag = doc.localized?.[locale]\n  return bag !== undefined && fieldName in bag\n}\n\n/**\n * Whether the value a surface displays for `field` in `locale` is served via\n * EC-018 default-locale fallback. `null` means \"not a fallback\": the field is\n * not localized (locale-independent by design), the active locale has its own\n * variant, or there is nothing to display at all (an empty field is empty,\n * not a fallback).\n */\nexport function displayedFieldFallback(\n  collection: CollectionDef,\n  doc: CmsDocument,\n  fieldName: string,\n  locale: Locale,\n  config: LocaleConfig,\n): DisplayedFallback | null {\n  if (!isFieldLocalized(collection, fieldName)) return null\n  if (hasLocaleVariant(doc, fieldName, locale)) return null\n  const resolved = resolveField(collection, doc, fieldName, locale, config)\n  if (!resolved.fellBack || resolved.value === undefined) return null\n  return { sourceLocale: resolved.sourceLocale, requestedLocale: locale }\n}\n\n/**\n * The value a surface should display for `field` in `locale` (explicit\n * variant, else fallback) together with its fallback marker. Display and\n * label come from the same resolution, so they can never disagree.\n */\nexport function resolveDisplayedValue(\n  collection: CollectionDef,\n  doc: CmsDocument,\n  fieldName: string,\n  locale: Locale,\n  config: LocaleConfig,\n): { value: unknown; fallback: DisplayedFallback | null } {\n  return {\n    value: resolveField(collection, doc, fieldName, locale, config).value,\n    fallback: displayedFieldFallback(collection, doc, fieldName, locale, config),\n  }\n}\n\n/**\n * True when editing `field` in `locale` would CREATE a new localized variant\n * (rather than update an existing one): the field is localized and the active\n * locale isn't the document's fallback source and has no variant yet. Drives\n * the \"translating from EN\" affordance on editors.\n */\nexport function editCreatesVariant(\n  collection: CollectionDef,\n  doc: CmsDocument,\n  fieldName: string,\n  locale: Locale,\n  config: LocaleConfig,\n): boolean {\n  if (!isFieldLocalized(collection, fieldName)) return false\n  if (locale === documentDefaultLocale(doc, config)) return false\n  return !hasLocaleVariant(doc, fieldName, locale)\n}\n\n/** Compact display form of a locale code for chips/badges (\"en\" → \"EN\"). */\nexport function localeChipLabel(locale: Locale): string {\n  return locale.toUpperCase()\n}\n\n/**\n * The active-locale value bag: the document's shared `values` overlaid with the\n * active locale's variants (`localized[locale]`). The merged view a surface reads\n * to evaluate conditional-visibility predicates (EC-273) and derive the auto-slug\n * source (EC-315) — deduped between the detail editor and the slug control. Pure.\n */\nexport function activeLocaleValues(doc: CmsDocument, locale: Locale): Record<string, unknown> {\n  return { ...doc.values, ...(doc.localized?.[locale] ?? {}) }\n}\n\n// ───────────────────────────────────────────────────────────────────────────\n// EC-318 — connected fields\n//\n// The Sanity/Contentful \"connected field\" model, over the SAME present/absent-key\n// storage EC-176 already uses. Connection state is DERIVED, never stored:\n//   • connected  = NO per-locale key → the field FOLLOWS the base-locale value.\n//   • diverged   = a per-locale key EXISTS → the field OWNS a locale value.\n// Editing a connected field diverges it (writes the key); \"fill from base\" seeds a\n// divergent copy; \"reset to base\" deletes the key to reconnect.\n//\n// Accepted limitation (a deliberate product decision, not an oversight): an\n// intentionally-EMPTY divergent value is not representable. The built-in controls\n// store a cleared value as `undefined`, which DELETES the key — so clearing a\n// localized field reconnects it to base rather than diverging it to empty.\n// ───────────────────────────────────────────────────────────────────────────\n\n/** The \"no value\" sentinels the built-in controls store (nothing to fill from). */\nfunction isBlankValue(value: unknown): boolean {\n  return value === undefined || value === null || value === ''\n}\n\n/**\n * The per-locale CONNECTION state of a localized field (EC-318), derived from the\n * document — never stored. `null` when the connected-field affordance does not\n * apply: the field isn't localized, or the requested locale IS the document's base\n * locale (there is nothing to follow — the base owns the value).\n */\nexport interface FieldConnection {\n  /** The document's base/default locale — the value a connected field follows. */\n  baseLocale: Locale\n  /** True when NO per-locale key exists: the field follows the base value. */\n  connected: boolean\n  /** The current base-locale value (\"fill from base\"/\"reset\" act against it). */\n  baseValue: unknown\n  /** True when the base holds a non-empty value there is something to fill from. */\n  canFillFromBase: boolean\n}\n\n/** Derive the connected/diverged state of `field` in `locale` (EC-318). */\nexport function fieldConnection(\n  collection: CollectionDef,\n  doc: CmsDocument,\n  fieldName: string,\n  locale: Locale,\n  config: LocaleConfig,\n): FieldConnection | null {\n  if (!isFieldLocalized(collection, fieldName)) return null\n  const baseLocale = documentDefaultLocale(doc, config)\n  if (locale === baseLocale) return null\n  const baseValue = resolveField(collection, doc, fieldName, baseLocale, config).value\n  return {\n    baseLocale,\n    connected: !hasLocaleVariant(doc, fieldName, locale),\n    baseValue,\n    canFillFromBase: !isBlankValue(baseValue),\n  }\n}\n\n/**\n * The present/absent-key write for one field — the FOUNDATION of the connected-\n * field model (EC-176/EC-318). A localized field's value lives under\n * `localized[locale][field]`; writing `undefined` DELETES that key (reconnecting\n * the field to base — the accepted empty-value limitation above). Non-localized\n * fields write the shared `values` bag. Pure — returns a new document.\n */\nexport function setFieldValue(\n  collection: CollectionDef,\n  doc: CmsDocument,\n  fieldName: string,\n  locale: Locale,\n  value: unknown,\n): CmsDocument {\n  if (isFieldLocalized(collection, fieldName)) {\n    const perLocale = { ...(doc.localized?.[locale] ?? {}) }\n    if (value === undefined) delete perLocale[fieldName]\n    else perLocale[fieldName] = value\n    return { ...doc, localized: { ...doc.localized, [locale]: perLocale } }\n  }\n  const values = { ...doc.values }\n  if (value === undefined) delete values[fieldName]\n  else values[fieldName] = value\n  return { ...doc, values }\n}\n\n/**\n * \"Fill from base\" (EC-318) — copy the current base-locale value into the active\n * locale, instantly DISCONNECTING the field with a pre-filled starting point. A\n * no-op when there is nothing to copy (blank base value). Pure.\n */\nexport function fillFieldFromBase(\n  collection: CollectionDef,\n  doc: CmsDocument,\n  fieldName: string,\n  locale: Locale,\n  config: LocaleConfig,\n): CmsDocument {\n  const connection = fieldConnection(collection, doc, fieldName, locale, config)\n  if (!connection || !connection.canFillFromBase) return doc\n  return setFieldValue(collection, doc, fieldName, locale, connection.baseValue)\n}\n\n/**\n * \"Reset to base\" / reconnect (EC-318) — delete the active-locale variant so the\n * field follows the base value again. Discards the translation, so gate it behind\n * a confirm. Pure.\n */\nexport function resetFieldToBase(\n  collection: CollectionDef,\n  doc: CmsDocument,\n  fieldName: string,\n  locale: Locale,\n): CmsDocument {\n  return setFieldValue(collection, doc, fieldName, locale, undefined)\n}\n"]}
+{"version":3,"file":"fallback.js","sourceRoot":"","sources":["../../../src/lib/locale/fallback.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAEhG,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AAkBpE,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,GAAgB,EAAE,SAAiB,EAAE,MAAc;IAClF,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAA;IACnC,OAAO,GAAG,KAAK,SAAS,IAAI,SAAS,IAAI,GAAG,CAAA;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAAyB,EACzB,GAAgB,EAChB,SAAiB,EACjB,MAAc,EACd,MAAoB;IAEpB,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IACzD,IAAI,gBAAgB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IACzD,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;IACzE,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IACnE,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,eAAe,EAAE,MAAM,EAAE,CAAA;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAyB,EACzB,GAAgB,EAChB,SAAiB,EACjB,MAAc,EACd,MAAoB;IAEpB,OAAO;QACL,KAAK,EAAE,YAAY,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK;QACrE,QAAQ,EAAE,sBAAsB,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC;KAC7E,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAAyB,EACzB,GAAgB,EAChB,SAAiB,EACjB,MAAc,EACd,MAAoB;IAEpB,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC;QAAE,OAAO,KAAK,CAAA;IAC1D,IAAI,MAAM,KAAK,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC;QAAE,OAAO,KAAK,CAAA;IAC/D,OAAO,CAAC,gBAAgB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;AAClD,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,MAAM,CAAC,WAAW,EAAE,CAAA;AAC7B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAgB,EAAE,MAAc;IACjE,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAA;AAC9D,CAAC;AAED,8EAA8E;AAC9E,4BAA4B;AAC5B,EAAE;AACF,kFAAkF;AAClF,0EAA0E;AAC1E,gFAAgF;AAChF,4EAA4E;AAC5E,mFAAmF;AACnF,gEAAgE;AAChE,EAAE;AACF,4EAA4E;AAC5E,kFAAkF;AAClF,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAE9E;;;;;GAKG;AACH,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAA;AAC7F,CAAC;AAmBD,2EAA2E;AAC3E,MAAM,UAAU,eAAe,CAC7B,UAAyB,EACzB,GAAgB,EAChB,SAAiB,EACjB,MAAc,EACd,MAAoB;IAEpB,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IACzD,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IACrD,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,IAAI,CAAA;IACtC,MAAM,SAAS,GAAG,YAAY,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,KAAK,CAAA;IACpF,OAAO;QACL,UAAU;QACV,SAAS,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC;QACpD,SAAS;QACT,eAAe,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC;KAC1C,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,UAAyB,EACzB,GAAgB,EAChB,SAAiB,EACjB,MAAc,EACd,KAAc;IAEd,IAAI,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAA;QACxD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC,SAAS,CAAC,CAAA;;YAC/C,SAAS,CAAC,SAAS,CAAC,GAAG,KAAK,CAAA;QACjC,OAAO,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,CAAA;IACzE,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,CAAA;IAChC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAA;;QAC5C,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAA;IAC9B,OAAO,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,CAAA;AAC3B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAyB,EACzB,GAAgB,EAChB,SAAiB,EACjB,MAAc,EACd,MAAoB;IAEpB,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9E,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,eAAe;QAAE,OAAO,GAAG,CAAA;IAC1D,OAAO,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,CAAA;AAChF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAyB,EACzB,GAAgB,EAChB,SAAiB,EACjB,MAAc;IAEd,OAAO,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;AACrE,CAAC","sourcesContent":["import { documentDefaultLocale, isFieldLocalized, resolveField } from '@elytracms/core/cms-core'\nimport type { CmsDocument, CollectionDef, Locale, LocaleConfig } from '@elytracms/core/cms-core'\nimport { isEmptyBlockSequence } from '@elytracms/core/project-graph'\n\n/**\n * Fallback visibility (EC-176) — the pure \"is this displayed value a\n * fallback?\" decision the CMS table cells, detail-editor fields, and the\n * builder's Content tab all share. One function answers it, so a value is\n * either labeled everywhere or a real translation everywhere — never\n * silently mixed.\n */\n\n/** A displayed value that came from the fallback locale, not the active one. */\nexport interface DisplayedFallback {\n  /** The locale the rendered value was actually read from. */\n  sourceLocale: Locale\n  /** The locale the surface asked for (the ambient active locale). */\n  requestedLocale: Locale\n}\n\n/** True when the document stores an explicit variant of `field` for `locale`. */\nexport function hasLocaleVariant(doc: CmsDocument, fieldName: string, locale: Locale): boolean {\n  const bag = doc.localized?.[locale]\n  return bag !== undefined && fieldName in bag\n}\n\n/**\n * Whether the value a surface displays for `field` in `locale` is served via\n * EC-018 default-locale fallback. `null` means \"not a fallback\": the field is\n * not localized (locale-independent by design), the active locale has its own\n * variant, or there is nothing to display at all (an empty field is empty,\n * not a fallback).\n */\nexport function displayedFieldFallback(\n  collection: CollectionDef,\n  doc: CmsDocument,\n  fieldName: string,\n  locale: Locale,\n  config: LocaleConfig,\n): DisplayedFallback | null {\n  if (!isFieldLocalized(collection, fieldName)) return null\n  if (hasLocaleVariant(doc, fieldName, locale)) return null\n  const resolved = resolveField(collection, doc, fieldName, locale, config)\n  if (!resolved.fellBack || resolved.value === undefined) return null\n  return { sourceLocale: resolved.sourceLocale, requestedLocale: locale }\n}\n\n/**\n * The value a surface should display for `field` in `locale` (explicit\n * variant, else fallback) together with its fallback marker. Display and\n * label come from the same resolution, so they can never disagree.\n */\nexport function resolveDisplayedValue(\n  collection: CollectionDef,\n  doc: CmsDocument,\n  fieldName: string,\n  locale: Locale,\n  config: LocaleConfig,\n): { value: unknown; fallback: DisplayedFallback | null } {\n  return {\n    value: resolveField(collection, doc, fieldName, locale, config).value,\n    fallback: displayedFieldFallback(collection, doc, fieldName, locale, config),\n  }\n}\n\n/**\n * True when editing `field` in `locale` would CREATE a new localized variant\n * (rather than update an existing one): the field is localized and the active\n * locale isn't the document's fallback source and has no variant yet. Drives\n * the \"translating from EN\" affordance on editors.\n */\nexport function editCreatesVariant(\n  collection: CollectionDef,\n  doc: CmsDocument,\n  fieldName: string,\n  locale: Locale,\n  config: LocaleConfig,\n): boolean {\n  if (!isFieldLocalized(collection, fieldName)) return false\n  if (locale === documentDefaultLocale(doc, config)) return false\n  return !hasLocaleVariant(doc, fieldName, locale)\n}\n\n/** Compact display form of a locale code for chips/badges (\"en\" → \"EN\"). */\nexport function localeChipLabel(locale: Locale): string {\n  return locale.toUpperCase()\n}\n\n/**\n * The active-locale value bag: the document's shared `values` overlaid with the\n * active locale's variants (`localized[locale]`). The merged view a surface reads\n * to evaluate conditional-visibility predicates (EC-273) and derive the auto-slug\n * source (EC-315) — deduped between the detail editor and the slug control. Pure.\n */\nexport function activeLocaleValues(doc: CmsDocument, locale: Locale): Record<string, unknown> {\n  return { ...doc.values, ...(doc.localized?.[locale] ?? {}) }\n}\n\n// ───────────────────────────────────────────────────────────────────────────\n// EC-318 — connected fields\n//\n// The Sanity/Contentful \"connected field\" model, over the SAME present/absent-key\n// storage EC-176 already uses. Connection state is DERIVED, never stored:\n//   • connected  = NO per-locale key → the field FOLLOWS the base-locale value.\n//   • diverged   = a per-locale key EXISTS → the field OWNS a locale value.\n// Editing a connected field diverges it (writes the key); \"fill from base\" seeds a\n// divergent copy; \"reset to base\" deletes the key to reconnect.\n//\n// Accepted limitation (a deliberate product decision, not an oversight): an\n// intentionally-EMPTY divergent value is not representable. The built-in controls\n// store a cleared value as `undefined`, which DELETES the key — so clearing a\n// localized field reconnects it to base rather than diverging it to empty.\n// ───────────────────────────────────────────────────────────────────────────\n\n/**\n * The \"no value\" sentinels the built-in controls store (nothing to fill from) —\n * including the empty v2 sequence a cleared canvas writes (EC-575, the same\n * project-graph rule `required` reads). Filling from it would only diverge the\n * locale to an empty value, the state this model deliberately cannot represent.\n */\nfunction isBlankValue(value: unknown): boolean {\n  return value === undefined || value === null || value === '' || isEmptyBlockSequence(value)\n}\n\n/**\n * The per-locale CONNECTION state of a localized field (EC-318), derived from the\n * document — never stored. `null` when the connected-field affordance does not\n * apply: the field isn't localized, or the requested locale IS the document's base\n * locale (there is nothing to follow — the base owns the value).\n */\nexport interface FieldConnection {\n  /** The document's base/default locale — the value a connected field follows. */\n  baseLocale: Locale\n  /** True when NO per-locale key exists: the field follows the base value. */\n  connected: boolean\n  /** The current base-locale value (\"fill from base\"/\"reset\" act against it). */\n  baseValue: unknown\n  /** True when the base holds a non-empty value there is something to fill from. */\n  canFillFromBase: boolean\n}\n\n/** Derive the connected/diverged state of `field` in `locale` (EC-318). */\nexport function fieldConnection(\n  collection: CollectionDef,\n  doc: CmsDocument,\n  fieldName: string,\n  locale: Locale,\n  config: LocaleConfig,\n): FieldConnection | null {\n  if (!isFieldLocalized(collection, fieldName)) return null\n  const baseLocale = documentDefaultLocale(doc, config)\n  if (locale === baseLocale) return null\n  const baseValue = resolveField(collection, doc, fieldName, baseLocale, config).value\n  return {\n    baseLocale,\n    connected: !hasLocaleVariant(doc, fieldName, locale),\n    baseValue,\n    canFillFromBase: !isBlankValue(baseValue),\n  }\n}\n\n/**\n * The present/absent-key write for one field — the FOUNDATION of the connected-\n * field model (EC-176/EC-318). A localized field's value lives under\n * `localized[locale][field]`; writing `undefined` DELETES that key (reconnecting\n * the field to base — the accepted empty-value limitation above). Non-localized\n * fields write the shared `values` bag. Pure — returns a new document.\n */\nexport function setFieldValue(\n  collection: CollectionDef,\n  doc: CmsDocument,\n  fieldName: string,\n  locale: Locale,\n  value: unknown,\n): CmsDocument {\n  if (isFieldLocalized(collection, fieldName)) {\n    const perLocale = { ...(doc.localized?.[locale] ?? {}) }\n    if (value === undefined) delete perLocale[fieldName]\n    else perLocale[fieldName] = value\n    return { ...doc, localized: { ...doc.localized, [locale]: perLocale } }\n  }\n  const values = { ...doc.values }\n  if (value === undefined) delete values[fieldName]\n  else values[fieldName] = value\n  return { ...doc, values }\n}\n\n/**\n * \"Fill from base\" (EC-318) — copy the current base-locale value into the active\n * locale, instantly DISCONNECTING the field with a pre-filled starting point. A\n * no-op when there is nothing to copy (blank base value). Pure.\n */\nexport function fillFieldFromBase(\n  collection: CollectionDef,\n  doc: CmsDocument,\n  fieldName: string,\n  locale: Locale,\n  config: LocaleConfig,\n): CmsDocument {\n  const connection = fieldConnection(collection, doc, fieldName, locale, config)\n  if (!connection || !connection.canFillFromBase) return doc\n  return setFieldValue(collection, doc, fieldName, locale, connection.baseValue)\n}\n\n/**\n * \"Reset to base\" / reconnect (EC-318) — delete the active-locale variant so the\n * field follows the base value again. Discards the translation, so gate it behind\n * a confirm. Pure.\n */\nexport function resetFieldToBase(\n  collection: CollectionDef,\n  doc: CmsDocument,\n  fieldName: string,\n  locale: Locale,\n): CmsDocument {\n  return setFieldValue(collection, doc, fieldName, locale, undefined)\n}\n"]}

package/dist/lib/locale/index.d.ts

@@ -1,6 +1,5 @@
 export * from './locale-store.js';
 export * from './fallback.js';
 export * from './route-variant.js';
-export * from './binding-fallback.js';
 export * from './use-studio-locale.js';
 export * from './locale-switcher.js';

package/dist/lib/locale/index.js

@@ -1,7 +1,6 @@
 export * from './locale-store.js';
 export * from './fallback.js';
 export * from './route-variant.js';
-export * from './binding-fallback.js';
 export * from './use-studio-locale.js';
 export * from './locale-switcher.js';
 //# sourceMappingURL=index.js.map

package/dist/lib/locale/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/locale/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,YAAY,CAAA;AAC1B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,oBAAoB,CAAA;AAClC,cAAc,qBAAqB,CAAA;AACnC,cAAc,mBAAmB,CAAA","sourcesContent":["export * from './locale-store'\nexport * from './fallback'\nexport * from './route-variant'\nexport * from './binding-fallback'\nexport * from './use-studio-locale'\nexport * from './locale-switcher'\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/locale/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,YAAY,CAAA;AAC1B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,qBAAqB,CAAA;AACnC,cAAc,mBAAmB,CAAA","sourcesContent":["export * from './locale-store'\nexport * from './fallback'\nexport * from './route-variant'\nexport * from './use-studio-locale'\nexport * from './locale-switcher'\n"]}

package/dist/lib/locale/locale-store.d.ts

@@ -57,9 +57,16 @@ export declare function getStudioLocaleConfig(): LocaleConfig | null;
  */
 export declare function setStudioLocale(locale: Locale): void;
 /**
- * Install the project's locale config (e.g. when a CMS session or builder
- * shell mounts with a starter kit's locales). The active locale is kept when
- * it is still configured, otherwise it snaps back to the new default.
+ * Install the project's locale config (when a CMS session mounts). The active
+ * locale is kept when it is still configured, otherwise it snaps back to the new
+ * default.
+ *
+ * The config arrives valid by construction: every caller hands over a
+ * config-derived `LocaleConfig` that the workspace gate has already checked
+ * (`default-locale-not-in-locales` is an error there), so nothing is repaired
+ * here. The old `createLocaleConfig` repair existed for starter-kit locales, a
+ * rung EC-574 removed — a second, silent declaration of "the default is in the
+ * set" is exactly the drift the one gate exists to prevent.
  */
 export declare function configureStudioLocales(config: LocaleConfig): void;
 /** Subscribe to locale/config changes. Returns the unsubscribe function. */

package/dist/lib/locale/locale-store.js

@@ -1,4 +1,4 @@
-import { createLocaleConfig, isKnownLocale } from '@elytracms/core/cms-core';
+import { isKnownLocale } from '@elytracms/core/cms-core';
 /** The pre-config state: no project locales have been installed yet. */
 const NOT_LOADED = { config: null, active: null };
 let state = NOT_LOADED;
@@ -42,12 +42,19 @@ export function setStudioLocale(locale) {
     emit();
 }
 /**
- * Install the project's locale config (e.g. when a CMS session or builder
- * shell mounts with a starter kit's locales). The active locale is kept when
- * it is still configured, otherwise it snaps back to the new default.
+ * Install the project's locale config (when a CMS session mounts). The active
+ * locale is kept when it is still configured, otherwise it snaps back to the new
+ * default.
+ *
+ * The config arrives valid by construction: every caller hands over a
+ * config-derived `LocaleConfig` that the workspace gate has already checked
+ * (`default-locale-not-in-locales` is an error there), so nothing is repaired
+ * here. The old `createLocaleConfig` repair existed for starter-kit locales, a
+ * rung EC-574 removed — a second, silent declaration of "the default is in the
+ * set" is exactly the drift the one gate exists to prevent.
  */
 export function configureStudioLocales(config) {
-    const normalized = createLocaleConfig({ default: config.default, locales: config.locales });
+    const normalized = { default: config.default, locales: [...config.locales] };
     const current = state.config;
     const sameConfig = current !== null &&
         normalized.default === current.default &&

package/dist/lib/locale/locale-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"locale-store.js","sourceRoot":"","sources":["../../../src/lib/locale/locale-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAqC5E,wEAAwE;AACxE,MAAM,UAAU,GAAsB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;AAEpE,IAAI,KAAK,GAAsB,UAAU,CAAA;AAEzC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAc,CAAA;AAEvC,SAAS,IAAI;IACX,KAAK,MAAM,QAAQ,IAAI,SAAS;QAAE,QAAQ,EAAE,CAAA;AAC9C,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,oBAAoB;IAClC,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;QAAE,OAAM;IACjC,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;QAAE,OAAM;IAC3E,KAAK,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IAChD,IAAI,EAAE,CAAA;AACR,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAoB;IACzD,MAAM,UAAU,GAAG,kBAAkB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;IAC3F,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAA;IAC5B,MAAM,UAAU,GACd,OAAO,KAAK,IAAI;QAChB,UAAU,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;QACtC,UAAU,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM;QACpD,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;IACxE,MAAM,MAAM,GACV,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC;QAC9D,CAAC,CAAC,KAAK,CAAC,MAAM;QACd,CAAC,CAAC,UAAU,CAAC,OAAO,CAAA;IACxB,IAAI,UAAU,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAM;IACjD,KAAK,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAA;IACtC,IAAI,EAAE,CAAA;AACR,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,qBAAqB,CAAC,QAAoB;IACxD,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACvB,OAAO,GAAG,EAAE;QACV,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC5B,CAAC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,KAAK,GAAG,UAAU,CAAA;IAClB,IAAI,EAAE,CAAA;AACR,CAAC","sourcesContent":["import { createLocaleConfig, isKnownLocale } from '@elytracms/core/cms-core'\nimport type { Locale, LocaleConfig } from '@elytracms/core/cms-core'\n\n/**\n * The studio's ambient locale (EC-176) — framework-free core.\n *\n * One studio-level active locale, set once via the locale switcher, that the\n * builder canvas preview, the CMS table, and the detail editor all follow.\n * Module-level (not React context) on purpose: the playground's content\n * client (`lib/data/collection-content`) reads it at query time without any\n * provider plumbing, and React surfaces subscribe through\n * `useStudioLocale` (`useSyncExternalStore`).\n *\n * Deliberately NOT part of `lib/data/data-store` — the locale is studio\n * state, not a data source.\n *\n * EC-479/EC-483 — **before a project's locale config is installed, this store\n * holds `null`, not a locale.** It used to open on the engine's `en/de`\n * `sampleLocaleConfig` fixture, which is the worst fallback in the family: the\n * default locale is the literal STORAGE KEY for every localized field value\n * (`documents.ts:88`), so a fabricated one writes a German project's content\n * under `en` and correcting it later is a data migration, not a config edit. The\n * locale is a deliberate choice at project creation (EC-483) and reaches the\n * studio through {@link configureStudioLocales} from the project's own config —\n * so \"not loaded\" is an honest state that surfaces, never an invented one that\n * silently becomes a key.\n */\n\n/**\n * `{ config, active }` once a project's locales are installed; `{ null, null }`\n * before that. The two fields move together by construction — there is no state\n * with a config but no active locale, or an active locale nobody declared.\n */\nexport type StudioLocaleState =\n  | { readonly config: LocaleConfig; readonly active: Locale }\n  | { readonly config: null; readonly active: null }\n\n/** The pre-config state: no project locales have been installed yet. */\nconst NOT_LOADED: StudioLocaleState = { config: null, active: null }\n\nlet state: StudioLocaleState = NOT_LOADED\n\nconst listeners = new Set<() => void>()\n\nfunction emit(): void {\n  for (const listener of listeners) listener()\n}\n\n/** Snapshot of `{ config, active }` — stable identity until the next change. */\nexport function getStudioLocaleState(): StudioLocaleState {\n  return state\n}\n\n/**\n * The active studio locale every surface renders in — `null` until a project's\n * locale config is installed. A caller that genuinely needs a locale reads the\n * PROJECT's own default (`CmsStore.localeConfig.default`, the content session's\n * config); it must never substitute one of its own.\n */\nexport function getStudioLocale(): Locale | null {\n  return state.active\n}\n\n/**\n * The project locale config driving the switcher options — `null` until one is\n * installed (the studio has no locales of its own to offer).\n */\nexport function getStudioLocaleConfig(): LocaleConfig | null {\n  return state.config\n}\n\n/**\n * Switch the ambient locale. Unknown locales are ignored (the switcher only\n * offers configured ones; programmatic callers get a no-op, never a crash), and\n * so is any switch attempted before a config is installed — there is nothing to\n * validate the locale against.\n */\nexport function setStudioLocale(locale: Locale): void {\n  if (state.config === null) return\n  if (locale === state.active || !isKnownLocale(state.config, locale)) return\n  state = { config: state.config, active: locale }\n  emit()\n}\n\n/**\n * Install the project's locale config (e.g. when a CMS session or builder\n * shell mounts with a starter kit's locales). The active locale is kept when\n * it is still configured, otherwise it snaps back to the new default.\n */\nexport function configureStudioLocales(config: LocaleConfig): void {\n  const normalized = createLocaleConfig({ default: config.default, locales: config.locales })\n  const current = state.config\n  const sameConfig =\n    current !== null &&\n    normalized.default === current.default &&\n    normalized.locales.length === current.locales.length &&\n    normalized.locales.every((locale, i) => locale === current.locales[i])\n  const active =\n    state.active !== null && isKnownLocale(normalized, state.active)\n      ? state.active\n      : normalized.default\n  if (sameConfig && active === state.active) return\n  state = { config: normalized, active }\n  emit()\n}\n\n/** Subscribe to locale/config changes. Returns the unsubscribe function. */\nexport function subscribeStudioLocale(listener: () => void): () => void {\n  listeners.add(listener)\n  return () => {\n    listeners.delete(listener)\n  }\n}\n\n/**\n * Reset to the pre-config \"not loaded\" state (tests only — module state is\n * shared). Never re-seeds a fixture config: a test that queries localized content\n * must say which locale it means, exactly like a project does.\n */\nexport function resetStudioLocale(): void {\n  state = NOT_LOADED\n  emit()\n}\n"]}
+{"version":3,"file":"locale-store.js","sourceRoot":"","sources":["../../../src/lib/locale/locale-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAqCxD,wEAAwE;AACxE,MAAM,UAAU,GAAsB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;AAEpE,IAAI,KAAK,GAAsB,UAAU,CAAA;AAEzC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAc,CAAA;AAEvC,SAAS,IAAI;IACX,KAAK,MAAM,QAAQ,IAAI,SAAS;QAAE,QAAQ,EAAE,CAAA;AAC9C,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,oBAAoB;IAClC,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;QAAE,OAAM;IACjC,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;QAAE,OAAM;IAC3E,KAAK,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IAChD,IAAI,EAAE,CAAA;AACR,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAoB;IACzD,MAAM,UAAU,GAAiB,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;IAC1F,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAA;IAC5B,MAAM,UAAU,GACd,OAAO,KAAK,IAAI;QAChB,UAAU,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;QACtC,UAAU,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM;QACpD,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;IACxE,MAAM,MAAM,GACV,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC;QAC9D,CAAC,CAAC,KAAK,CAAC,MAAM;QACd,CAAC,CAAC,UAAU,CAAC,OAAO,CAAA;IACxB,IAAI,UAAU,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAM;IACjD,KAAK,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAA;IACtC,IAAI,EAAE,CAAA;AACR,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,qBAAqB,CAAC,QAAoB;IACxD,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACvB,OAAO,GAAG,EAAE;QACV,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC5B,CAAC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,KAAK,GAAG,UAAU,CAAA;IAClB,IAAI,EAAE,CAAA;AACR,CAAC","sourcesContent":["import { isKnownLocale } from '@elytracms/core/cms-core'\nimport type { Locale, LocaleConfig } from '@elytracms/core/cms-core'\n\n/**\n * The studio's ambient locale (EC-176) — framework-free core.\n *\n * One studio-level active locale, set once via the locale switcher, that the\n * builder canvas preview, the CMS table, and the detail editor all follow.\n * Module-level (not React context) on purpose: the playground's content\n * client (`lib/data/collection-content`) reads it at query time without any\n * provider plumbing, and React surfaces subscribe through\n * `useStudioLocale` (`useSyncExternalStore`).\n *\n * Deliberately NOT part of `lib/data/data-store` — the locale is studio\n * state, not a data source.\n *\n * EC-479/EC-483 — **before a project's locale config is installed, this store\n * holds `null`, not a locale.** It used to open on the engine's `en/de`\n * `sampleLocaleConfig` fixture, which is the worst fallback in the family: the\n * default locale is the literal STORAGE KEY for every localized field value\n * (`documents.ts:88`), so a fabricated one writes a German project's content\n * under `en` and correcting it later is a data migration, not a config edit. The\n * locale is a deliberate choice at project creation (EC-483) and reaches the\n * studio through {@link configureStudioLocales} from the project's own config —\n * so \"not loaded\" is an honest state that surfaces, never an invented one that\n * silently becomes a key.\n */\n\n/**\n * `{ config, active }` once a project's locales are installed; `{ null, null }`\n * before that. The two fields move together by construction — there is no state\n * with a config but no active locale, or an active locale nobody declared.\n */\nexport type StudioLocaleState =\n  | { readonly config: LocaleConfig; readonly active: Locale }\n  | { readonly config: null; readonly active: null }\n\n/** The pre-config state: no project locales have been installed yet. */\nconst NOT_LOADED: StudioLocaleState = { config: null, active: null }\n\nlet state: StudioLocaleState = NOT_LOADED\n\nconst listeners = new Set<() => void>()\n\nfunction emit(): void {\n  for (const listener of listeners) listener()\n}\n\n/** Snapshot of `{ config, active }` — stable identity until the next change. */\nexport function getStudioLocaleState(): StudioLocaleState {\n  return state\n}\n\n/**\n * The active studio locale every surface renders in — `null` until a project's\n * locale config is installed. A caller that genuinely needs a locale reads the\n * PROJECT's own default (`CmsStore.localeConfig.default`, the content session's\n * config); it must never substitute one of its own.\n */\nexport function getStudioLocale(): Locale | null {\n  return state.active\n}\n\n/**\n * The project locale config driving the switcher options — `null` until one is\n * installed (the studio has no locales of its own to offer).\n */\nexport function getStudioLocaleConfig(): LocaleConfig | null {\n  return state.config\n}\n\n/**\n * Switch the ambient locale. Unknown locales are ignored (the switcher only\n * offers configured ones; programmatic callers get a no-op, never a crash), and\n * so is any switch attempted before a config is installed — there is nothing to\n * validate the locale against.\n */\nexport function setStudioLocale(locale: Locale): void {\n  if (state.config === null) return\n  if (locale === state.active || !isKnownLocale(state.config, locale)) return\n  state = { config: state.config, active: locale }\n  emit()\n}\n\n/**\n * Install the project's locale config (when a CMS session mounts). The active\n * locale is kept when it is still configured, otherwise it snaps back to the new\n * default.\n *\n * The config arrives valid by construction: every caller hands over a\n * config-derived `LocaleConfig` that the workspace gate has already checked\n * (`default-locale-not-in-locales` is an error there), so nothing is repaired\n * here. The old `createLocaleConfig` repair existed for starter-kit locales, a\n * rung EC-574 removed — a second, silent declaration of \"the default is in the\n * set\" is exactly the drift the one gate exists to prevent.\n */\nexport function configureStudioLocales(config: LocaleConfig): void {\n  const normalized: LocaleConfig = { default: config.default, locales: [...config.locales] }\n  const current = state.config\n  const sameConfig =\n    current !== null &&\n    normalized.default === current.default &&\n    normalized.locales.length === current.locales.length &&\n    normalized.locales.every((locale, i) => locale === current.locales[i])\n  const active =\n    state.active !== null && isKnownLocale(normalized, state.active)\n      ? state.active\n      : normalized.default\n  if (sameConfig && active === state.active) return\n  state = { config: normalized, active }\n  emit()\n}\n\n/** Subscribe to locale/config changes. Returns the unsubscribe function. */\nexport function subscribeStudioLocale(listener: () => void): () => void {\n  listeners.add(listener)\n  return () => {\n    listeners.delete(listener)\n  }\n}\n\n/**\n * Reset to the pre-config \"not loaded\" state (tests only — module state is\n * shared). Never re-seeds a fixture config: a test that queries localized content\n * must say which locale it means, exactly like a project does.\n */\nexport function resetStudioLocale(): void {\n  state = NOT_LOADED\n  emit()\n}\n"]}

package/dist/lib/operations/session-hydration.d.ts

@@ -34,11 +34,15 @@ export declare const VIEWS_COLLECTION = "cms-saved-views";
  * Convex-specific.
  */
 /**
- * Collections owned by studio subsystems (data sources, saved views). They live
- * in the same persisted schema but are NOT content: the CMS session, the
- * sidebar, and the content preview engine must never offer them as authorable
- * collections. Routes/redirects are NO LONGER system collections (EC-207): they
- * are config-sourced and never persisted to the backend.
+ * Collections owned by studio subsystems (saved views). They live in the same
+ * persisted schema but are NOT content: the CMS session, the sidebar, and the
+ * content preview engine must never offer them as authorable collections.
+ * Routes/redirects are NO LONGER system collections (EC-207): they are
+ * config-sourced and never persisted to the backend. EC-574: `cms-data-sources`
+ * (the data-binding subsystem's source records) is no longer a system id either
+ * — a deployment that still holds such rows now sees them as documents of a
+ * collection the config does not declare, exactly like any other orphaned row
+ * (`documents.clear` + re-seed is the ruled clean-up, EC-576).
  */
 export declare const STUDIO_SYSTEM_COLLECTION_IDS: ReadonlySet<string>;
 /** The persisted CMS content of a project: schema + documents, system collections excluded. */

package/dist/lib/operations/session-hydration.js

@@ -1,5 +1,4 @@
 import { documentKey } from '@elytracms/core/cms-core';
-import { DATA_SOURCES_COLLECTION } from '../data/sources-store.js';
 /**
  * Legacy marker (EC-246b): editor-owned saved views are retired — list
  * presentation is config-as-code now (named views live in `cms/`). The id is kept
@@ -33,16 +32,17 @@ export const VIEWS_COLLECTION = 'cms-saved-views';
  * Convex-specific.
  */
 /**
- * Collections owned by studio subsystems (data sources, saved views). They live
- * in the same persisted schema but are NOT content: the CMS session, the
- * sidebar, and the content preview engine must never offer them as authorable
- * collections. Routes/redirects are NO LONGER system collections (EC-207): they
- * are config-sourced and never persisted to the backend.
+ * Collections owned by studio subsystems (saved views). They live in the same
+ * persisted schema but are NOT content: the CMS session, the sidebar, and the
+ * content preview engine must never offer them as authorable collections.
+ * Routes/redirects are NO LONGER system collections (EC-207): they are
+ * config-sourced and never persisted to the backend. EC-574: `cms-data-sources`
+ * (the data-binding subsystem's source records) is no longer a system id either
+ * — a deployment that still holds such rows now sees them as documents of a
+ * collection the config does not declare, exactly like any other orphaned row
+ * (`documents.clear` + re-seed is the ruled clean-up, EC-576).
  */
-export const STUDIO_SYSTEM_COLLECTION_IDS = new Set([
-    DATA_SOURCES_COLLECTION,
-    VIEWS_COLLECTION,
-]);
+export const STUDIO_SYSTEM_COLLECTION_IDS = new Set([VIEWS_COLLECTION]);
 /**
  * Load the persisted CMS content state. `null` when the project has no
  * persisted content schema (first run — the session seeds fixtures and the

package/dist/lib/operations/session-hydration.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-hydration.js","sourceRoot":"","sources":["../../../src/lib/operations/session-hydration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AAGtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAG/D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,iBAAiB,CAAA;AAEjD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAwB,IAAI,GAAG,CAAC;IACvE,uBAAuB;IACvB,gBAAgB;CACjB,CAAC,CAAA;AA2DF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,UAA4B,EAC5B,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IACzD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAA;IAC/E,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CACjD,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,4BAA4B,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CACjE,CAAA;IACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IAC9D,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAChE,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAA;IACnC,+EAA+E;IAC/E,oFAAoF;IACpF,gFAAgF;IAChF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1E,MAAM,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACvD,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAC3C,CAAA;IACD,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,iBAAiB,GAAG,CAAC,MAAuC,EAAE,EAAE,CACpE,MAAM,CAAC,gBAAgB,KAAK,SAAS,CAAA;IACvC,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,WAAW;YACX,0EAA0E;YAC1E,2EAA2E;YAC3E,yEAAyE;YACzE,yEAAyE;YACzE,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC1D,aAAa,EAAE,cAAc;iBAC1B,MAAM,CAAC,iBAAiB,CAAC;iBACzB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChD,8EAA8E;YAC9E,2EAA2E;YAC3E,UAAU,EAAE,MAAM,CAAC,WAAW,CAC5B,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CACjF;YACD,2EAA2E;YAC3E,0EAA0E;YAC1E,yEAAyE;YACzE,iBAAiB,EAAE,MAAM,CAAC,WAAW,CACnC,cAAc;iBACX,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC;iBACpD,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,WAAqB,CAAC,CAAC,CACjF;YACD,2EAA2E;YAC3E,2EAA2E;YAC3E,+DAA+D;YAC/D,WAAW,EAAE,cAAc;iBACxB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,qBAAqB,KAAK,IAAI,CAAC;iBACzD,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;SACtC;KACF,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAA4B,EAC5B,SAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IACxD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAA;IACvB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,CAAA;AAChD,CAAC","sourcesContent":["import { documentKey } from '@elytracms/core/cms-core'\nimport type { CmsDocument, CollectionDef } from '@elytracms/core/cms-core'\nimport type { AssetRecord } from '@elytracms/core/persistence'\nimport { DATA_SOURCES_COLLECTION } from '../data/sources-store'\nimport type { OperationResult, OperationsClient } from './operations-package'\n\n/**\n * Legacy marker (EC-246b): editor-owned saved views are retired — list\n * presentation is config-as-code now (named views live in `cms/`). The id is kept\n * only so hydration keeps excluding any `cms-saved-views` documents a pre-EC-246b\n * deployment persisted, so they never surface as content.\n */\nexport const VIEWS_COLLECTION = 'cms-saved-views'\n\n/**\n * Persisted-session hydration (Milestone B sign-off fix, EC-177 gap 1).\n *\n * Against a persistent backend (Convex mode) a studio session must BOOT from\n * what is persisted — the saved CMS schema + documents (+ asset records) — and\n * fall back to the deterministic fixtures only when the project has nothing\n * persisted yet (first run). Before this, every session seeded from fixtures,\n * so reloads hid the editor's work.\n *\n * EC-287: the DB-resident project graph and its publish path are retired —\n * layouts/config/schema/components are CODE, the DB holds content only. A\n * session no longer hydrates a graph revision or graph-publishing state; CMS\n * content (with per-document `publishedVersion`, EC-224) is the only persisted\n * surface a session boots from.\n *\n * This module is the pure load half: read-only `@elytracms/core/operations` queries\n * composed into one hydration result. `not-found` is a *normal* answer (the\n * first-run fallback); every other failure propagates as the structured\n * operation error so the gate renders it — never a silent fixture fallback.\n * The React gate that applies it lives in\n * `components/studio/project-session.tsx`. EC-361: the playground calls the\n * SAME loader (over the seeded in-memory adapter, through operations — AD-17)\n * to hydrate the canvas/preview content session; only the render-gating is\n * Convex-specific.\n */\n\n/**\n * Collections owned by studio subsystems (data sources, saved views). They live\n * in the same persisted schema but are NOT content: the CMS session, the\n * sidebar, and the content preview engine must never offer them as authorable\n * collections. Routes/redirects are NO LONGER system collections (EC-207): they\n * are config-sourced and never persisted to the backend.\n */\nexport const STUDIO_SYSTEM_COLLECTION_IDS: ReadonlySet<string> = new Set([\n  DATA_SOURCES_COLLECTION,\n  VIEWS_COLLECTION,\n])\n\n/** The persisted CMS content of a project: schema + documents, system collections excluded. */\nexport interface HydratedCms {\n  collections: CollectionDef[]\n  documents: CmsDocument[]\n  /**\n   * Published document keys (EC-224), via the version pointer: a record is\n   * published iff `publishedVersion` is set. The session boots its\n   * `publishedKeys` from this — published-ness is the pointer, nothing else.\n   */\n  publishedKeys: string[]\n  /**\n   * Per-document last-write timestamps (EC-445), keyed by `documentKey`\n   * (`collection:id`) → the persisted `cmsDocuments.updatedAt` ISO string. Backs the\n   * `$updatedAt` list column; the session seeds its `documentUpdatedAt` map from this.\n   * Optional so pre-EC-445 fixtures/callers stay valid (the session falls back to a\n   * session-start stamp for the seeded documents); `loadHydratedCms` always sets it.\n   */\n  timestamps?: Record<string, string>\n  /**\n   * Per-document FIRST-publish instants (EC-447), keyed by `documentKey`\n   * (`collection:id`) → the persisted `cmsDocuments.publishedAt` ISO string. Present\n   * only for documents that carry one (currently published, with a recorded publish\n   * instant); the session seeds its `documentPublishedAt` map from this. Backs the\n   * `$publishedAt` list column. UNLIKE {@link timestamps} there is no session-start\n   * fallback — an absent entry is a real \"no publish date\" (EmDash), and the store\n   * re-stamps/clears it authoritatively on publish/unpublish. Optional so pre-EC-447\n   * fixtures/callers stay valid; `loadHydratedCms` always sets it.\n   */\n  publishTimestamps?: Record<string, string>\n  /**\n   * Document keys whose working draft carries UNPUBLISHED CHANGES (EC-449) — the\n   * persisted `cmsDocuments.hasUnpublishedChanges === true` set, keyed like\n   * {@link publishedKeys}. Backs the amber \"changed\" state of the `$state` list\n   * dot; the session seeds its changed-set from this and re-stamps it\n   * authoritatively on save/publish/unpublish from the returned records. Only\n   * `true` flags contribute — an absent entry means \"no unpublished changes\"\n   * (`false` or not yet materialized both render the same dot). Optional so\n   * pre-EC-449 fixtures/callers stay valid; `loadHydratedCms` always sets it.\n   */\n  changedKeys?: string[]\n  /**\n   * The project's asset records (the `assets` table — NOT cms `asset`-collection\n   * documents). The preview content engine wires these into its lookup so listing/\n   * relation results resolve their `asset`-typed FIELDS (e.g. a ProductGrid product's\n   * `gallery`) to delivery shape — matching what the renderer's `resolveAsset` already\n   * does for static `asset` props (EC-262). Without them, the studio canvas renders\n   * such nested images blank even though the documents reference real assets.\n   */\n  assets: AssetRecord[]\n}\n\n/** Everything a Convex-mode session boots from. `null` fields mean \"nothing persisted\" (first run). */\nexport interface HydratedProjectSession {\n  /** Persisted CMS schema + documents, or `null` when no content schema was ever saved. */\n  cms: HydratedCms | null\n}\n\n/**\n * Load the persisted CMS content state. `null` when the project has no\n * persisted content schema (first run — the session seeds fixtures and the\n * persister's baseline will persist them on the first edit). A schema that\n * contains only studio system collections counts as \"no content persisted\":\n * system stores (saved views, routes) may create the schema record before any\n * content baseline ran.\n */\nexport async function loadHydratedCms(\n  operations: OperationsClient,\n  projectId: string,\n): Promise<OperationResult<HydratedCms | null>> {\n  const schema = await operations.schema.get({ projectId })\n  if (!schema.ok) {\n    return schema.error.code === 'not-found' ? { ok: true, value: null } : schema\n  }\n  const collections = schema.value.collections.filter(\n    (collection) => !STUDIO_SYSTEM_COLLECTION_IDS.has(collection.id),\n  )\n  if (collections.length === 0) return { ok: true, value: null }\n  const documents = await operations.documents.list({ projectId })\n  if (!documents.ok) return documents\n  // The project's asset records (assets table), wired into the preview lookup so\n  // listing/relation results resolve their nested `asset` fields (EC-262). Non-fatal:\n  // a failed asset list degrades previews to no images, never blocks the session.\n  const assets = await operations.assets.list({ projectId })\n  const contentIds = new Set(collections.map((collection) => collection.id))\n  const contentRecords = documents.value.filter((record) =>\n    contentIds.has(record.document.collection),\n  )\n  // EC-224: a record is published when its version pointer is set — the same\n  // gate delivery reads. There is no flat-state fallback (the field is gone).\n  const isRecordPublished = (record: (typeof contentRecords)[number]) =>\n    record.publishedVersion !== undefined\n  return {\n    ok: true,\n    value: {\n      collections,\n      // The live row hydrates AS PERSISTED — a continuous draft (EC-224). We no\n      // longer stamp a `state:'published'` mirror: published-ness is the version\n      // pointer (`publishedKeys`), which every studio reader now consults (the\n      // table badge/$state via `isPublished`, the preview engine via the pin).\n      documents: contentRecords.map((record) => record.document),\n      publishedKeys: contentRecords\n        .filter(isRecordPublished)\n        .map((record) => documentKey(record.document)),\n      // EC-445: carry each record's `updatedAt` onto the session for the $updatedAt\n      // column — a per-document metadata accessor, exactly like `publishedKeys`.\n      timestamps: Object.fromEntries(\n        contentRecords.map((record) => [documentKey(record.document), record.updatedAt]),\n      ),\n      // EC-447: carry each PUBLISHED record's materialized `publishedAt` for the\n      // $publishedAt column. Only records that actually have one contribute (no\n      // session-start fallback) — an absent entry is a real \"no publish date\".\n      publishTimestamps: Object.fromEntries(\n        contentRecords\n          .filter((record) => record.publishedAt !== undefined)\n          .map((record) => [documentKey(record.document), record.publishedAt as string]),\n      ),\n      // EC-449: the documents whose draft carries unpublished changes (the amber\n      // list dot) — only materialized `true` flags contribute (absent/false both\n      // mean \"not changed\"; the flag only exists on published docs).\n      changedKeys: contentRecords\n        .filter((record) => record.hasUnpublishedChanges === true)\n        .map((record) => documentKey(record.document)),\n      assets: assets.ok ? assets.value : [],\n    },\n  }\n}\n\n/**\n * Load everything a project session hydrates from. Post-EC-287 that is just the\n * persisted CMS content (schema + documents + assets): the project graph and its\n * publish path are gone, so there is no graph revision or graph-publishing state\n * to load. Per-document `publishedVersion` (EC-224) is the only published surface.\n */\nexport async function loadProjectSession(\n  operations: OperationsClient,\n  projectId: string,\n): Promise<OperationResult<HydratedProjectSession>> {\n  const cms = await loadHydratedCms(operations, projectId)\n  if (!cms.ok) return cms\n  return { ok: true, value: { cms: cms.value } }\n}\n"]}
+{"version":3,"file":"session-hydration.js","sourceRoot":"","sources":["../../../src/lib/operations/session-hydration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AAKtD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,iBAAiB,CAAA;AAEjD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAwB,IAAI,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAA;AA2D5F;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,UAA4B,EAC5B,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IACzD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAA;IAC/E,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CACjD,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,4BAA4B,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CACjE,CAAA;IACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IAC9D,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAChE,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAA;IACnC,+EAA+E;IAC/E,oFAAoF;IACpF,gFAAgF;IAChF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1E,MAAM,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACvD,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAC3C,CAAA;IACD,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,iBAAiB,GAAG,CAAC,MAAuC,EAAE,EAAE,CACpE,MAAM,CAAC,gBAAgB,KAAK,SAAS,CAAA;IACvC,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,WAAW;YACX,0EAA0E;YAC1E,2EAA2E;YAC3E,yEAAyE;YACzE,yEAAyE;YACzE,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC1D,aAAa,EAAE,cAAc;iBAC1B,MAAM,CAAC,iBAAiB,CAAC;iBACzB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChD,8EAA8E;YAC9E,2EAA2E;YAC3E,UAAU,EAAE,MAAM,CAAC,WAAW,CAC5B,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CACjF;YACD,2EAA2E;YAC3E,0EAA0E;YAC1E,yEAAyE;YACzE,iBAAiB,EAAE,MAAM,CAAC,WAAW,CACnC,cAAc;iBACX,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC;iBACpD,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,WAAqB,CAAC,CAAC,CACjF;YACD,2EAA2E;YAC3E,2EAA2E;YAC3E,+DAA+D;YAC/D,WAAW,EAAE,cAAc;iBACxB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,qBAAqB,KAAK,IAAI,CAAC;iBACzD,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;SACtC;KACF,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAA4B,EAC5B,SAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IACxD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAA;IACvB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,CAAA;AAChD,CAAC","sourcesContent":["import { documentKey } from '@elytracms/core/cms-core'\nimport type { CmsDocument, CollectionDef } from '@elytracms/core/cms-core'\nimport type { AssetRecord } from '@elytracms/core/persistence'\nimport type { OperationResult, OperationsClient } from './operations-package'\n\n/**\n * Legacy marker (EC-246b): editor-owned saved views are retired — list\n * presentation is config-as-code now (named views live in `cms/`). The id is kept\n * only so hydration keeps excluding any `cms-saved-views` documents a pre-EC-246b\n * deployment persisted, so they never surface as content.\n */\nexport const VIEWS_COLLECTION = 'cms-saved-views'\n\n/**\n * Persisted-session hydration (Milestone B sign-off fix, EC-177 gap 1).\n *\n * Against a persistent backend (Convex mode) a studio session must BOOT from\n * what is persisted — the saved CMS schema + documents (+ asset records) — and\n * fall back to the deterministic fixtures only when the project has nothing\n * persisted yet (first run). Before this, every session seeded from fixtures,\n * so reloads hid the editor's work.\n *\n * EC-287: the DB-resident project graph and its publish path are retired —\n * layouts/config/schema/components are CODE, the DB holds content only. A\n * session no longer hydrates a graph revision or graph-publishing state; CMS\n * content (with per-document `publishedVersion`, EC-224) is the only persisted\n * surface a session boots from.\n *\n * This module is the pure load half: read-only `@elytracms/core/operations` queries\n * composed into one hydration result. `not-found` is a *normal* answer (the\n * first-run fallback); every other failure propagates as the structured\n * operation error so the gate renders it — never a silent fixture fallback.\n * The React gate that applies it lives in\n * `components/studio/project-session.tsx`. EC-361: the playground calls the\n * SAME loader (over the seeded in-memory adapter, through operations — AD-17)\n * to hydrate the canvas/preview content session; only the render-gating is\n * Convex-specific.\n */\n\n/**\n * Collections owned by studio subsystems (saved views). They live in the same\n * persisted schema but are NOT content: the CMS session, the sidebar, and the\n * content preview engine must never offer them as authorable collections.\n * Routes/redirects are NO LONGER system collections (EC-207): they are\n * config-sourced and never persisted to the backend. EC-574: `cms-data-sources`\n * (the data-binding subsystem's source records) is no longer a system id either\n * — a deployment that still holds such rows now sees them as documents of a\n * collection the config does not declare, exactly like any other orphaned row\n * (`documents.clear` + re-seed is the ruled clean-up, EC-576).\n */\nexport const STUDIO_SYSTEM_COLLECTION_IDS: ReadonlySet<string> = new Set([VIEWS_COLLECTION])\n\n/** The persisted CMS content of a project: schema + documents, system collections excluded. */\nexport interface HydratedCms {\n  collections: CollectionDef[]\n  documents: CmsDocument[]\n  /**\n   * Published document keys (EC-224), via the version pointer: a record is\n   * published iff `publishedVersion` is set. The session boots its\n   * `publishedKeys` from this — published-ness is the pointer, nothing else.\n   */\n  publishedKeys: string[]\n  /**\n   * Per-document last-write timestamps (EC-445), keyed by `documentKey`\n   * (`collection:id`) → the persisted `cmsDocuments.updatedAt` ISO string. Backs the\n   * `$updatedAt` list column; the session seeds its `documentUpdatedAt` map from this.\n   * Optional so pre-EC-445 fixtures/callers stay valid (the session falls back to a\n   * session-start stamp for the seeded documents); `loadHydratedCms` always sets it.\n   */\n  timestamps?: Record<string, string>\n  /**\n   * Per-document FIRST-publish instants (EC-447), keyed by `documentKey`\n   * (`collection:id`) → the persisted `cmsDocuments.publishedAt` ISO string. Present\n   * only for documents that carry one (currently published, with a recorded publish\n   * instant); the session seeds its `documentPublishedAt` map from this. Backs the\n   * `$publishedAt` list column. UNLIKE {@link timestamps} there is no session-start\n   * fallback — an absent entry is a real \"no publish date\" (EmDash), and the store\n   * re-stamps/clears it authoritatively on publish/unpublish. Optional so pre-EC-447\n   * fixtures/callers stay valid; `loadHydratedCms` always sets it.\n   */\n  publishTimestamps?: Record<string, string>\n  /**\n   * Document keys whose working draft carries UNPUBLISHED CHANGES (EC-449) — the\n   * persisted `cmsDocuments.hasUnpublishedChanges === true` set, keyed like\n   * {@link publishedKeys}. Backs the amber \"changed\" state of the `$state` list\n   * dot; the session seeds its changed-set from this and re-stamps it\n   * authoritatively on save/publish/unpublish from the returned records. Only\n   * `true` flags contribute — an absent entry means \"no unpublished changes\"\n   * (`false` or not yet materialized both render the same dot). Optional so\n   * pre-EC-449 fixtures/callers stay valid; `loadHydratedCms` always sets it.\n   */\n  changedKeys?: string[]\n  /**\n   * The project's asset records (the `assets` table — NOT cms `asset`-collection\n   * documents). The preview content engine wires these into its lookup so listing/\n   * relation results resolve their `asset`-typed FIELDS (e.g. a ProductGrid product's\n   * `gallery`) to delivery shape — matching what the renderer's `resolveAsset` already\n   * does for static `asset` props (EC-262). Without them, the studio canvas renders\n   * such nested images blank even though the documents reference real assets.\n   */\n  assets: AssetRecord[]\n}\n\n/** Everything a Convex-mode session boots from. `null` fields mean \"nothing persisted\" (first run). */\nexport interface HydratedProjectSession {\n  /** Persisted CMS schema + documents, or `null` when no content schema was ever saved. */\n  cms: HydratedCms | null\n}\n\n/**\n * Load the persisted CMS content state. `null` when the project has no\n * persisted content schema (first run — the session seeds fixtures and the\n * persister's baseline will persist them on the first edit). A schema that\n * contains only studio system collections counts as \"no content persisted\":\n * system stores (saved views, routes) may create the schema record before any\n * content baseline ran.\n */\nexport async function loadHydratedCms(\n  operations: OperationsClient,\n  projectId: string,\n): Promise<OperationResult<HydratedCms | null>> {\n  const schema = await operations.schema.get({ projectId })\n  if (!schema.ok) {\n    return schema.error.code === 'not-found' ? { ok: true, value: null } : schema\n  }\n  const collections = schema.value.collections.filter(\n    (collection) => !STUDIO_SYSTEM_COLLECTION_IDS.has(collection.id),\n  )\n  if (collections.length === 0) return { ok: true, value: null }\n  const documents = await operations.documents.list({ projectId })\n  if (!documents.ok) return documents\n  // The project's asset records (assets table), wired into the preview lookup so\n  // listing/relation results resolve their nested `asset` fields (EC-262). Non-fatal:\n  // a failed asset list degrades previews to no images, never blocks the session.\n  const assets = await operations.assets.list({ projectId })\n  const contentIds = new Set(collections.map((collection) => collection.id))\n  const contentRecords = documents.value.filter((record) =>\n    contentIds.has(record.document.collection),\n  )\n  // EC-224: a record is published when its version pointer is set — the same\n  // gate delivery reads. There is no flat-state fallback (the field is gone).\n  const isRecordPublished = (record: (typeof contentRecords)[number]) =>\n    record.publishedVersion !== undefined\n  return {\n    ok: true,\n    value: {\n      collections,\n      // The live row hydrates AS PERSISTED — a continuous draft (EC-224). We no\n      // longer stamp a `state:'published'` mirror: published-ness is the version\n      // pointer (`publishedKeys`), which every studio reader now consults (the\n      // table badge/$state via `isPublished`, the preview engine via the pin).\n      documents: contentRecords.map((record) => record.document),\n      publishedKeys: contentRecords\n        .filter(isRecordPublished)\n        .map((record) => documentKey(record.document)),\n      // EC-445: carry each record's `updatedAt` onto the session for the $updatedAt\n      // column — a per-document metadata accessor, exactly like `publishedKeys`.\n      timestamps: Object.fromEntries(\n        contentRecords.map((record) => [documentKey(record.document), record.updatedAt]),\n      ),\n      // EC-447: carry each PUBLISHED record's materialized `publishedAt` for the\n      // $publishedAt column. Only records that actually have one contribute (no\n      // session-start fallback) — an absent entry is a real \"no publish date\".\n      publishTimestamps: Object.fromEntries(\n        contentRecords\n          .filter((record) => record.publishedAt !== undefined)\n          .map((record) => [documentKey(record.document), record.publishedAt as string]),\n      ),\n      // EC-449: the documents whose draft carries unpublished changes (the amber\n      // list dot) — only materialized `true` flags contribute (absent/false both\n      // mean \"not changed\"; the flag only exists on published docs).\n      changedKeys: contentRecords\n        .filter((record) => record.hasUnpublishedChanges === true)\n        .map((record) => documentKey(record.document)),\n      assets: assets.ok ? assets.value : [],\n    },\n  }\n}\n\n/**\n * Load everything a project session hydrates from. Post-EC-287 that is just the\n * persisted CMS content (schema + documents + assets): the project graph and its\n * publish path are gone, so there is no graph revision or graph-publishing state\n * to load. Per-document `publishedVersion` (EC-224) is the only published surface.\n */\nexport async function loadProjectSession(\n  operations: OperationsClient,\n  projectId: string,\n): Promise<OperationResult<HydratedProjectSession>> {\n  const cms = await loadHydratedCms(operations, projectId)\n  if (!cms.ok) return cms\n  return { ok: true, value: { cms: cms.value } }\n}\n"]}

package/dist/lib/persistence/convex-adapter.js

@@ -1,5 +1,6 @@
+import { ConvexError } from 'convex/values';
 import { documentKey, documentSchema } from '@elytracms/core/cms-core';
-import { RecordNotFoundError, PersistenceValidationError, compareReferenceEntries, highestRole, isKnownRole, validateForPersistence, } from '@elytracms/core/persistence';
+import { RecordNotFoundError, PersistenceValidationError, assetCreateDefaults, assetRecordFromRow, compareReferenceEntries, highestRole, isKnownRole, persistenceIssueSchema, presentWriteKeys, redirectEntryFromRow, validateForPersistence, } from '@elytracms/core/persistence';
 import { normalizeInviteEmail } from '@elytracms/core/persistence';
 import { queryRef, mutationRef } from './convex-client.js';
 import { ConvexBlobStorage } from './convex-blob-storage.js';
@@ -17,9 +18,14 @@ function newId(prefix) {
  * carries a stable placeholder rather than DB-row timestamps.
  */
 const CONFIG_SCHEMA_TIMESTAMP = '2026-01-01T00:00:00.000Z';
-function docRecordFromDoc(doc) {
+/**
+ * Row → contract record. `projectId` is the caller's (the row has none): before
+ * EC-577 this copied the row's nonexistent `projectId`, so every connected
+ * `CmsDocumentRecord.projectId` was `undefined` against a `min(1)` schema (MODE #6).
+ */
+function docRecordFromDoc(doc, projectId) {
     return {
-        projectId: doc.projectId,
+        projectId,
         document: doc.document,
         ...(doc.publishedVersion !== undefined ? { publishedVersion: doc.publishedVersion } : {}),
         // EC-447: carry the materialized publish instant onto the contract record so the
@@ -104,7 +110,7 @@ class ConvexCmsRepository {
             createdAt: now,
             updatedAt: now,
         }));
-        return docRecordFromDoc(doc);
+        return docRecordFromDoc(doc, projectId);
     }
     async getDocument(projectId, ref) {
         const found = await this.findDocument(projectId, ref);
@@ -117,7 +123,7 @@ class ConvexCmsRepository {
             collection: ref.collection,
             docId: ref.id,
         }));
-        return doc ? docRecordFromDoc(doc) : undefined;
+        return doc ? docRecordFromDoc(doc, projectId) : undefined;
     }
     async listDocuments(projectId, collection) {
         const docs = (await this.client.query(queryRef('cms:listDocuments'), {
@@ -126,7 +132,7 @@ class ConvexCmsRepository {
         // EC-153 parity: deterministic document-key ordering (Convex index order
         // within a project is insertion order, so we sort client-side).
         return docs
-            .map(docRecordFromDoc)
+            .map((doc) => docRecordFromDoc(doc, projectId))
             .sort((a, b) => (documentKey(a.document) < documentKey(b.document) ? -1 : 1));
     }
     async listPublishedDocuments(projectId, collection) {
@@ -148,6 +154,10 @@ class ConvexCmsRepository {
             docId: ref.id,
         });
     }
+    async clearDocuments(_projectId) {
+        // EC-576: one deployment is one project — the mutation clears both tables at once.
+        await this.client.mutation(mutationRef('cms:clearDocuments'), {});
+    }
     async saveDocumentVersion(projectId, snapshot, options = {}) {
         const parsed = documentSchema.parse(snapshot);
         const doc = (await this.client.mutation(mutationRef('cms:saveDocumentVersion'), {
@@ -198,7 +208,7 @@ class ConvexCmsRepository {
             updatedAt: now,
             publishedAt: now,
         }));
-        return docRecordFromDoc(doc);
+        return docRecordFromDoc(doc, projectId);
     }
     async unpublishDocument(projectId, ref) {
         const existing = await this.getDocument(projectId, ref);
@@ -216,30 +226,24 @@ class ConvexCmsRepository {
             docId: ref.id,
             updatedAt: this.clock(),
         }));
-        return docRecordFromDoc(doc);
+        return docRecordFromDoc(doc, projectId);
     }
 }
-/** Map a Convex asset doc onto the contract record (assetId → id, drop _id/_creationTime). */
-function assetRecordFromDoc(doc) {
-    return {
-        id: doc.assetId,
-        projectId: doc.projectId,
-        filename: doc.filename,
-        contentType: doc.contentType,
-        byteSize: doc.byteSize,
-        ...(doc.width !== undefined ? { width: doc.width } : {}),
-        ...(doc.height !== undefined ? { height: doc.height } : {}),
-        ...(doc.alt !== undefined ? { alt: doc.alt } : {}),
-        ...(doc.title !== undefined ? { title: doc.title } : {}),
-        ...(doc.url !== undefined ? { url: doc.url } : {}),
-        ...(doc.focalPoint !== undefined ? { focalPoint: doc.focalPoint } : {}),
-        ...(doc.thumb !== undefined ? { thumb: doc.thumb } : {}),
-        ...(doc.lqip !== undefined ? { lqip: doc.lqip } : {}),
-        ...(doc.meta !== undefined ? { meta: doc.meta } : {}),
-        storageKey: doc.storageKey,
-        createdAt: doc.createdAt,
-        updatedAt: doc.updatedAt,
-    };
+/**
+ * A rail write the handler rejected (EC-577): `resolveRecordWrite` found the write
+ * invalid inside the transaction and threw a `validation` `ConvexError` — mapped
+ * back onto the provider-neutral {@link PersistenceValidationError} the in-memory
+ * adapter throws for the same write. `ConvexError` data survives a production
+ * deployment's error redaction, unlike a plain thrown message.
+ */
+function asRailWriteError(error) {
+    if (!(error instanceof ConvexError))
+        return error;
+    const data = error.data;
+    if (data?.code !== 'validation' || typeof data.message !== 'string')
+        return error;
+    const issues = persistenceIssueSchema.array().safeParse(data.issues);
+    return new PersistenceValidationError(data.message, issues.success ? issues.data : []);
 }
 class ConvexAssetRepository {
     client;
@@ -250,27 +254,23 @@ class ConvexAssetRepository {
     }
     async upsertAsset(projectId, input) {
         const now = this.clock();
-        const id = input.id ?? newId('asset');
-        const doc = (await this.client.mutation(mutationRef('assets:upsert'), {
+        const { id: givenId, ...write } = input;
+        const id = givenId ?? newId('asset');
+        // EC-577: send the write as written — absent keys stay absent (keep), `null`
+        // crosses the wire as the clear. The handler resolves it against the stored
+        // row inside the transaction; the create defaults ride along for a create.
+        const doc = (await this.client
+            .mutation(mutationRef('assets:upsert'), {
             assetId: id,
-            filename: input.filename,
-            contentType: input.contentType,
-            byteSize: input.byteSize,
-            ...(input.width !== undefined ? { width: input.width } : {}),
-            ...(input.height !== undefined ? { height: input.height } : {}),
-            ...(input.alt !== undefined ? { alt: input.alt } : {}),
-            // EC-153 parity: `title` (EC-152 metadata) must persist, not silently drop.
-            ...(input.title !== undefined ? { title: input.title } : {}),
-            ...(input.url !== undefined ? { url: input.url } : {}),
-            ...(input.focalPoint !== undefined ? { focalPoint: input.focalPoint } : {}),
-            ...(input.thumb !== undefined ? { thumb: input.thumb } : {}),
-            ...(input.lqip !== undefined ? { lqip: input.lqip } : {}),
-            ...(input.meta !== undefined ? { meta: input.meta } : {}),
-            storageKey: input.storageKey ?? `${projectId}/${id}`,
+            ...presentWriteKeys(write),
+            defaults: assetCreateDefaults(projectId, id),
             createdAt: now,
             updatedAt: now,
+        })
+            .catch((error) => {
+            throw asRailWriteError(error);
         }));
-        return assetRecordFromDoc(doc);
+        return assetRecordFromRow(doc, projectId);
     }
     async getAsset(projectId, id) {
         const found = await this.findAsset(projectId, id);
@@ -282,11 +282,11 @@ class ConvexAssetRepository {
         const doc = (await this.client.query(queryRef('assets:get'), {
             assetId: id,
         }));
-        return doc ? assetRecordFromDoc(doc) : undefined;
+        return doc ? assetRecordFromRow(doc, projectId) : undefined;
     }
-    async listAssets(_projectId) {
+    async listAssets(projectId) {
         const docs = (await this.client.query(queryRef('assets:list'), {}));
-        return docs.map(assetRecordFromDoc);
+        return docs.map((doc) => assetRecordFromRow(doc, projectId));
     }
     async removeAsset(projectId, id) {
         // EC-153 parity: removing an unknown asset is not-found, never a no-op.
@@ -612,25 +612,12 @@ class ConvexInviteRepository {
         }
     }
 }
-function redirectEntryFromDoc(doc, projectId) {
-    return {
-        id: doc.redirectId,
-        projectId,
-        from: doc.from,
-        to: doc.to,
-        permanent: doc.permanent,
-        enabled: doc.enabled,
-        ...(doc.meta !== undefined ? { meta: doc.meta } : {}),
-        createdAt: doc.createdAt,
-        updatedAt: doc.updatedAt,
-    };
-}
 /**
  * Convex-backed {@link RedirectRepository} (EC-303) — editorial redirects as data
  * (not config). Content-gated CRUD over the `redirects` table; the studio's
- * editorial surface + the delivery snapshot both read through here. The editorial
- * surface sends a full record on save, so create-defaults (permanent/enabled) also
- * cover edits.
+ * editorial surface + the delivery snapshot both read through here. A save sends
+ * the write as written (EC-577): the create defaults live in the record schema and
+ * apply inside the handler's transaction, only when the save creates the redirect.
  */
 class ConvexRedirectRepository {
     client;
@@ -641,18 +628,19 @@ class ConvexRedirectRepository {
     }
     async saveRedirect(projectId, input) {
         const now = this.clock();
-        const id = input.id ?? newId('redirect');
-        const doc = (await this.client.mutation(mutationRef('redirects:save'), {
+        const { id: givenId, ...write } = input;
+        const id = givenId ?? newId('redirect');
+        const doc = (await this.client
+            .mutation(mutationRef('redirects:save'), {
             redirectId: id,
-            from: input.from,
-            to: input.to,
-            permanent: input.permanent ?? true,
-            enabled: input.enabled ?? true,
-            ...(input.meta !== undefined ? { meta: input.meta } : {}),
+            ...presentWriteKeys(write),
             createdAt: now,
             updatedAt: now,
+        })
+            .catch((error) => {
+            throw asRailWriteError(error);
         }));
-        return redirectEntryFromDoc(doc, projectId);
+        return redirectEntryFromRow(doc, projectId);
     }
     async getRedirect(projectId, id) {
         const found = await this.findRedirect(projectId, id);
@@ -664,12 +652,12 @@ class ConvexRedirectRepository {
         const doc = (await this.client.query(queryRef('redirects:get'), {
             redirectId: id,
         }));
-        return doc ? redirectEntryFromDoc(doc, projectId) : undefined;
+        return doc ? redirectEntryFromRow(doc, projectId) : undefined;
     }
     async listRedirects(projectId) {
         const docs = (await this.client.query(queryRef('redirects:list'), {}));
         return docs
-            .map((doc) => redirectEntryFromDoc(doc, projectId))
+            .map((doc) => redirectEntryFromRow(doc, projectId))
             .sort((a, b) => (a.from < b.from ? -1 : a.from > b.from ? 1 : 0));
     }
     async removeRedirect(projectId, id) {