@elytracms/studio 0.0.92 → 0.0.94

package/dist/mount.js

@@ -0,0 +1,27 @@
+/**
+ * `@elytracms/studio/mount` — the screens a studio's ROUTE FILES mount (EC-616).
+ *
+ * The scaffold's studio is a handful of TanStack route files that each mount one engine
+ * screen; this entry is exactly those screens, and nothing else:
+ *
+ * ```tsx
+ * // studio/src/routes/index.tsx         — the project launcher (and its forced `?state=`)
+ * import { ProjectLauncher, parseSectionState } from '@elytracms/studio/mount'
+ * // studio/src/routes/$projectId.$.tsx  — every per-project surface, resolved from the URL
+ * import { StudioProjectScreen } from '@elytracms/studio/mount'
+ * // studio/src/routes/sign-in.tsx       — the sign-in screen
+ * import { SignInView } from '@elytracms/studio/mount'
+ * ```
+ *
+ * It is NOT the addon contract (that is `@elytracms/studio/addon`) and not the
+ * customization API (`@elytracms/studio/customization`): a mount is where the scaffold
+ * puts the engine's screens, so it gets its own declared entry instead of four per-file
+ * keys that would freeze internal file paths as public API. Before EC-616 these four were
+ * reachable only through the `./components/*` wildcard, which the published package no
+ * longer has.
+ */
+export { ProjectLauncher } from './components/project-list.js';
+export { parseSectionState } from './components/section-surface.js';
+export { StudioProjectScreen } from './components/studio-project-screen.js';
+export { SignInView } from './components/sign-in-view.js';
+//# sourceMappingURL=mount.js.map

package/dist/mount.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mount.js","sourceRoot":"","sources":["../src/mount.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAE3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAA;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA","sourcesContent":["/**\n * `@elytracms/studio/mount` — the screens a studio's ROUTE FILES mount (EC-616).\n *\n * The scaffold's studio is a handful of TanStack route files that each mount one engine\n * screen; this entry is exactly those screens, and nothing else:\n *\n * ```tsx\n * // studio/src/routes/index.tsx         — the project launcher (and its forced `?state=`)\n * import { ProjectLauncher, parseSectionState } from '@elytracms/studio/mount'\n * // studio/src/routes/$projectId.$.tsx  — every per-project surface, resolved from the URL\n * import { StudioProjectScreen } from '@elytracms/studio/mount'\n * // studio/src/routes/sign-in.tsx       — the sign-in screen\n * import { SignInView } from '@elytracms/studio/mount'\n * ```\n *\n * It is NOT the addon contract (that is `@elytracms/studio/addon`) and not the\n * customization API (`@elytracms/studio/customization`): a mount is where the scaffold\n * puts the engine's screens, so it gets its own declared entry instead of four per-file\n * keys that would freeze internal file paths as public API. Before EC-616 these four were\n * reachable only through the `./components/*` wildcard, which the published package no\n * longer has.\n */\nexport { ProjectLauncher } from './components/project-list'\nexport type { ProjectLauncherProps } from './components/project-list'\nexport { parseSectionState } from './components/section-surface'\nexport { StudioProjectScreen } from './components/studio-project-screen'\nexport { SignInView } from './components/sign-in-view'\nexport type { SignInViewProps } from './components/sign-in-view'\n"]}

package/dist/router/root.js

@@ -1,17 +1,17 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { createRootRoute, HeadContent, Outlet, Scripts, useLocation, } from '@tanstack/react-router';
 import { NavigateOnce } from './navigate-once.js';
-import { AuthProvider, useAuth } from '@elytracms/studio/components/auth-context';
-import { DeploymentSetupGate } from '@elytracms/studio/components/deployment-setup-gate';
-import { SessionExpiredOverlay } from '@elytracms/studio/components/session-expired-overlay';
-import { StudioProvider } from '@elytracms/studio/components/studio-context';
-import { ThemeProvider } from '@elytracms/studio/components/theme-context';
+import { AuthProvider, useAuth } from '../components/auth-context.js';
+import { DeploymentSetupGate } from '../components/deployment-setup-gate.js';
+import { SessionExpiredOverlay } from '../components/session-expired-overlay.js';
+import { StudioProvider } from '../components/studio-context.js';
+import { ThemeProvider } from '../components/theme-context.js';
 import { Loader2 } from 'lucide-react';
-import { SIGN_IN_PATH, resolveRouteGuard } from '@elytracms/studio/lib/auth';
-import { useHydrated, useT, useUiLocale } from '@elytracms/studio/lib/i18n';
-import { setStudioBaseTitle } from '@elytracms/studio/lib/tab-title';
-import { activeSlugForLocation, setActiveProjectSlug } from '@elytracms/studio/lib/workspace';
-import { THEME_INIT_SCRIPT } from '@elytracms/studio/lib/theme';
+import { SIGN_IN_PATH, resolveRouteGuard } from '../lib/auth/index.js';
+import { useHydrated, useT, useUiLocale } from '../lib/i18n/index.js';
+import { setStudioBaseTitle } from '../lib/tab-title.js';
+import { activeSlugForLocation, setActiveProjectSlug } from '../lib/workspace/index.js';
+import { THEME_INIT_SCRIPT } from '../lib/theme.js';
 export function createStudioRootRoute(options) {
     const { appCssUrl, title = 'Elytra', htmlLang, meta = [], links = [], providers } = options;
     // EC-402: register the base title for the shell's per-view tab-title effect

package/dist/router/root.js.map

@@ -1 +1 @@
-{"version":3,"file":"root.js","sourceRoot":"","sources":["../../src/router/root.tsx"],"names":[],"mappings":";AACA,OAAO,EACL,eAAe,EACf,WAAW,EACX,MAAM,EACN,OAAO,EACP,WAAW,GACZ,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,2CAA2C,CAAA;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oDAAoD,CAAA;AACxF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sDAAsD,CAAA;AAC5F,OAAO,EAAE,cAAc,EAAE,MAAM,6CAA6C,CAAA;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,4CAA4C,CAAA;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AAC5E,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAA;AAC3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACpE,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAA;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAyD/D,MAAM,UAAU,qBAAqB,CAAC,OAA+B;IACnE,MAAM,EAAE,SAAS,EAAE,KAAK,GAAG,QAAQ,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;IAE3F,4EAA4E;IAC5E,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,kEAAkE;IAClE,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAEzB,SAAS,aAAa;QACpB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;QAC9B,gFAAgF;QAChF,6EAA6E;QAC7E,kFAAkF;QAClF,oFAAoF;QACpF,kFAAkF;QAClF,kFAAkF;QAClF,+EAA+E;QAC/E,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;QAC9B,6EAA6E;QAC7E,yEAAyE;QACzE,0EAA0E;QAC1E,8EAA8E;QAC9E,yEAAyE;QACzE,6EAA6E;QAC7E,MAAM,UAAU,GAAG,qBAAqB,CACtC,QAAQ,CAAC,QAAQ,EAChB,QAAQ,CAAC,MAAgC,CAAC,QAAQ,CACpD,CAAA;QACD,oBAAoB,CAAC,UAAU,CAAC,CAAA;QAEhC,OAAO,CACL,KAAC,YAAY,IAAC,QAAQ,EAAE,QAAQ,IAAI,QAAQ,YAC1C,KAAC,aAAa,cAOZ,KAAC,mBAAmB,cAClB,KAAC,YAAY,cACX,KAAC,QAAQ,cACP,MAAC,cAAc,eACZ,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAC,MAAM,KAAG,CAAC,CAAC,CAAC,CAAC,KAAC,MAAM,KAAG,EAK/C,KAAC,qBAAqB,KAAG,IACV,GACR,IAVM,UAAU,IAAI,cAAc,CAWhC,GACK,GACR,GACH,CAChB,CAAA;IACH,CAAC;IAED,OAAO,eAAe,CAAC;QACrB,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YACX,IAAI,EAAE;gBACJ,EAAE,OAAO,EAAE,OAAO,EAAE;gBACpB,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,qCAAqC,EAAE;gBACpE,EAAE,KAAK,EAAE;gBACT,GAAG,IAAI;aACR;YACD,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,KAAK,CAAC;SAC1D,CAAC;QACF,SAAS,EAAE,aAAa;KACzB,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,EAAE,QAAQ,EAA2B;IACrD,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAA;IAC5B,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;IAC9B,6EAA6E;IAC7E,0EAA0E;IAC1E,0EAA0E;IAC1E,2EAA2E;IAC3E,uEAAuE;IACvE,0EAA0E;IAC1E,yEAAyE;IACzE,iEAAiE;IACjE,MAAM,WAAW,GAAI,QAAQ,CAAC,MAAiC,CAAC,QAAQ,CAAA;IACxE,MAAM,QAAQ,GAAG,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1E,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;IAEvE,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,KAAC,cAAc,KAAG,CAAA;IAC1D,IAAI,QAAQ,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;QAC5C,0EAA0E;QAC1E,0EAA0E;QAC1E,4CAA4C;QAC5C,OAAO,KAAC,YAAY,IAAC,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,OAAO,SAAG,CAAA;IAC5F,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,eAAe;QAAE,OAAO,KAAC,YAAY,IAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,SAAG,CAAA;IAC3F,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;IAC9B,MAAM,CAAC,GAAG,IAAI,EAAE,CAAA;IAChB,OAAO,CACL,eAAK,SAAS,EAAC,iDAAiD,EAAC,IAAI,EAAC,QAAQ,aAC5E,KAAC,OAAO,IAAC,SAAS,EAAC,2CAA2C,iBAAa,MAAM,GAAG,EACnF,QAAQ,CAAC,CAAC,CAAC,eAAM,SAAS,EAAC,SAAS,YAAE,CAAC,CAAC,2BAA2B,CAAC,GAAQ,CAAC,CAAC,CAAC,IAAI,IAChF,CACP,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAA6C;IACrF,2EAA2E;IAC3E,8EAA8E;IAC9E,8EAA8E;IAC9E,4EAA4E;IAC5E,kFAAkF;IAClF,EAAE;IACF,iFAAiF;IACjF,sFAAsF;IACtF,8EAA8E;IAC9E,kFAAkF;IAClF,uFAAuF;IACvF,sFAAsF;IACtF,iFAAiF;IACjF,sFAAsF;IACtF,qBAAqB;IACrB,OAAO,CACL,gBAAM,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAC,MAAM,EAAC,wBAAwB,mBAC7D,2BACE,KAAC,WAAW,KAAG,EACf,iBAAQ,uBAAuB,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAI,IAC7D,EACP,gBAAM,SAAS,EAAC,kEAAkE,aAC/E,QAAQ,EACT,KAAC,OAAO,KAAG,IACN,IACF,CACR,CAAA;AACH,CAAC","sourcesContent":["import type { ReactNode } from 'react'\nimport {\n  createRootRoute,\n  HeadContent,\n  Outlet,\n  Scripts,\n  useLocation,\n} from '@tanstack/react-router'\nimport { NavigateOnce } from './navigate-once'\nimport { AuthProvider, useAuth } from '@elytracms/studio/components/auth-context'\nimport { DeploymentSetupGate } from '@elytracms/studio/components/deployment-setup-gate'\nimport { SessionExpiredOverlay } from '@elytracms/studio/components/session-expired-overlay'\nimport { StudioProvider } from '@elytracms/studio/components/studio-context'\nimport { ThemeProvider } from '@elytracms/studio/components/theme-context'\nimport { Loader2 } from 'lucide-react'\nimport { SIGN_IN_PATH, resolveRouteGuard } from '@elytracms/studio/lib/auth'\nimport { useHydrated, useT, useUiLocale } from '@elytracms/studio/lib/i18n'\nimport { setStudioBaseTitle } from '@elytracms/studio/lib/tab-title'\nimport { activeSlugForLocation, setActiveProjectSlug } from '@elytracms/studio/lib/workspace'\nimport { THEME_INIT_SCRIPT } from '@elytracms/studio/lib/theme'\n\n/**\n * Studio root-route boot factory (EC-375; consolidated from the copy-pasted\n * consumer `__root.tsx` by EC-369 finding #7). It assembles the ONE canonical\n * provider/gate stack — ThemeProvider → DeploymentSetupGate → AuthProvider(keyed)\n * → AuthGate → StudioProvider → Outlet — plus the `RootDocument` shell\n * (html/head with the pre-hydration theme script + the chrome stylesheet).\n *\n * Its whole purpose is to make the NEXT required-gate addition automatic on\n * package upgrade: when EC-258 added `DeploymentSetupGate`, every hand-copied\n * `__root.tsx` had to be manually re-synced, and Konditorei's silently missed\n * it for five releases (EC-367). Owning the composition here means a consumer's\n * `__root.tsx` shrinks to a thin shell and picks up new gates for free.\n *\n * The consumer re-exports the returned route as `Route` (the generated route\n * tree imports `Route` from `./routes/__root`):\n *\n * ```tsx\n * import { createStudioRootRoute } from '@elytracms/studio/router/root'\n * import appCss from '../styles/app.css?url'\n * export const Route = createStudioRootRoute({ appCssUrl: appCss })\n * ```\n */\nexport interface StudioRootRouteOptions {\n  /**\n   * URL of the studio chrome stylesheet, from the consumer's Vite `?url` import\n   * (`import appCss from '../styles/app.css?url'`). The one option every consumer\n   * must pass — the sheet is project-owned (it carries the delivery theme).\n   */\n  appCssUrl: string\n  /** Document `<title>`. Default: `'Elytra'`. */\n  title?: string\n  /**\n   * `<html lang>`. Defaults to the **resolved studio-UI locale** (EC-513): the\n   * config-pinned `i18n.locale` if there is one, otherwise the default locale on the\n   * server and, once browser detection takes over after hydration, the visitor's\n   * preferred locale. Pass a value only to fix `lang` to something the chrome is not\n   * actually rendered in.\n   */\n  htmlLang?: string\n  /**\n   * Extra `<head>` meta entries appended after the defaults (charset, viewport,\n   * title). Same shape TanStack Router's `head().meta` takes.\n   */\n  meta?: Array<Record<string, string>>\n  /** Extra `<head>` link entries appended after the app stylesheet. */\n  links?: Array<Record<string, string>>\n  /**\n   * Escape hatch: wrap additional project-specific providers around the routed\n   * subtree. Rendered INSIDE `StudioProvider` and around `<Outlet />`, so nested\n   * providers see the full studio/auth/theme context and remount with the active\n   * project. Return the passed `children` wrapped in your providers.\n   */\n  providers?: (children: ReactNode) => ReactNode\n}\n\nexport function createStudioRootRoute(options: StudioRootRouteOptions) {\n  const { appCssUrl, title = 'Elytra', htmlLang, meta = [], links = [], providers } = options\n\n  // EC-402: register the base title for the shell's per-view tab-title effect\n  // (`StudioTabTitle` composes `deepest crumb · view · project · <this title>`\n  // and restores exactly this value when leaving a project view). Module-holder\n  // seam — same pattern as `setActiveProjectSlug` — so the shell never has to\n  // capture `document.title` and race the router's own head effect.\n  setStudioBaseTitle(title)\n\n  function RootComponent() {\n    const location = useLocation()\n    // EC-513: locale resolution is client-side, so the studio boots in the server's\n    // locale (default, or the `i18n.locale` pin) and hands over to the browser's\n    // preference AFTER hydration — the hydration render has to reproduce the server's\n    // markup or React discards the tree with a mismatch error. Subscribing HERE, at the\n    // one root above the whole chrome, is what makes the handover visible everywhere:\n    // ~948 of the studio's localized render sites call the non-hook `translate()` and\n    // would otherwise never re-render for it. It also keeps `<html lang>` honest —\n    // it names the language the chrome is actually rendered in, at every moment.\n    const uiLocale = useUiLocale()\n    // EC-179: the active project selects its Convex backend. Resolve it from the\n    // URL (or the sign-in redirect target) and bind it *before* the auth and\n    // persistence adapters are selected, so the initial sign-in authenticates\n    // against the project the user is heading for. Keying the auth/studio subtree\n    // by the active project remounts it on a project switch, so the adapters\n    // re-select against the new backend and the session is restored per-backend.\n    const activeSlug = activeSlugForLocation(\n      location.pathname,\n      (location.search as { redirect?: string }).redirect,\n    )\n    setActiveProjectSlug(activeSlug)\n\n    return (\n      <RootDocument htmlLang={htmlLang ?? uiLocale}>\n        <ThemeProvider>\n          {/* EC-258: one deployment-setup gate runs before auth — a misconfigured or\n              unreachable backend, an invalid workspace config, or any failing readiness\n              precondition (missing auth signing key, required collections, …) is a\n              single visible boot screen with copy-pasteable fixes, never a silent\n              in-memory fallback or a misleading downstream error. All checks passing\n              renders children as before. */}\n          <DeploymentSetupGate>\n            <AuthProvider key={activeSlug ?? '__launcher__'}>\n              <AuthGate>\n                <StudioProvider>\n                  {providers ? providers(<Outlet />) : <Outlet />}\n                  {/* EC-403: the blocking in-place re-auth overlay — mounted over\n                      every route, INSIDE StudioProvider (it invalidates the studio\n                      query cache on re-auth) and inside AuthProvider (it reads the\n                      sessionExpired state). Renders null unless the session died. */}\n                  <SessionExpiredOverlay />\n                </StudioProvider>\n              </AuthGate>\n            </AuthProvider>\n          </DeploymentSetupGate>\n        </ThemeProvider>\n      </RootDocument>\n    )\n  }\n\n  return createRootRoute({\n    head: () => ({\n      meta: [\n        { charSet: 'utf-8' },\n        { name: 'viewport', content: 'width=device-width, initial-scale=1' },\n        { title },\n        ...meta,\n      ],\n      links: [{ rel: 'stylesheet', href: appCssUrl }, ...links],\n    }),\n    component: RootComponent,\n  })\n}\n\n/**\n * Route guard (EC-150): one chokepoint in the root layout. Unauthenticated\n * visitors on protected paths are redirected to the sign-in screen (with the\n * intended target preserved); signed-in users never see the sign-in screen.\n * The decision logic is the pure, unit-tested `resolveRouteGuard`.\n */\nfunction AuthGate({ children }: { children: ReactNode }) {\n  const { status } = useAuth()\n  const location = useLocation()\n  // EC-451: feed the still-pending `?redirect` search param into the decision.\n  // Dev auto-login (or any fast real sign-in — SSO return, password-manager\n  // autofill) can flip the session to signed-in while the location is still\n  // `/sign-in?redirect=…`, BEFORE `SignInView`'s own post-sign-in navigation\n  // runs; the gate's bounce then fires first and must consume the target\n  // instead of dropping it on an unconditional `/`. The target is validated\n  // by `postSignInTarget` inside `resolveRouteGuard` (same-origin relative\n  // paths only — redirect is an attacker-suppliable search param).\n  const rawRedirect = (location.search as { redirect?: unknown }).redirect\n  const redirect = typeof rawRedirect === 'string' ? rawRedirect : undefined\n  const decision = resolveRouteGuard(location.pathname, status, redirect)\n\n  if (decision.kind === 'pending') return <SessionLoading />\n  if (decision.kind === 'redirect-to-sign-in') {\n    // EC-441: `NavigateOnce`, not `<Navigate>` — the gate stays mounted while\n    // the sign-in transition is pending, and a per-render re-navigate spirals\n    // into the router's update-depth rejection.\n    return <NavigateOnce to={SIGN_IN_PATH} search={{ redirect: decision.redirect }} replace />\n  }\n  if (decision.kind === 'redirect-home') return <NavigateOnce to={decision.target} replace />\n  return children\n}\n\n/**\n * The studio's boot screen: the deterministic session-restore state and — because a\n * request-less render always finds the auth gate `pending` — the entire body of the\n * build-time prerendered SPA shell (`dist/client/_shell.html`).\n *\n * **It is deliberately wordless** (EC-523; owner-ratified 2026-08-01: *\"remove the text\n * — if we really need something while loading, add a simple spinner, but not mandatory —\n * the shell should stay free of side-effects\"*). A build-time prerender has no request,\n * hence no `Accept-Language` and no session, so it cannot know the visitor's language.\n * EC-513 fixed the one string that flipped after hydration; removing the words removes\n * the possibility of the next one.\n *\n * **Accessibility**, because \"no words\" must not mean \"no accessible name\": moving the\n * text into an `aria-label` bakes the very same wrong-language string into the shell,\n * only somewhere a screen-reader user cannot notice it flip. So the shell ships an\n * **empty** `role=\"status\"` region — the correct live-region shape in any case, since a\n * region must already exist in the DOM for a later insertion to be announced — and\n * `useHydrated` fills it once hydration is done, in the visitor's actual locale. The\n * unannounced window is bounded by hydration, i.e. exactly the window in which no\n * announcement could have been correct.\n *\n * Do **not** add `aria-busy` here: on a live region it tells assistive tech to withhold\n * updates, which would suppress the very announcement this shape exists to deliver.\n *\n * Exported so the shell's pre-hydration markup is pinnable with `renderToStaticMarkup`\n * (`root.test.tsx`) — the built artefact is the real proof, but nothing else in the\n * node test pattern can reach this render.\n */\nexport function SessionLoading() {\n  const hydrated = useHydrated()\n  const t = useT()\n  return (\n    <div className=\"grid min-h-dvh place-items-center bg-background\" role=\"status\">\n      <Loader2 className=\"size-6 animate-spin text-muted-foreground\" aria-hidden=\"true\" />\n      {hydrated ? <span className=\"sr-only\">{t('auth.boot.checkingSession')}</span> : null}\n    </div>\n  )\n}\n\nfunction RootDocument({ children, htmlLang }: { children: ReactNode; htmlLang: string }) {\n  // Dark-first SSR baseline; THEME_INIT_SCRIPT flips the class pre-hydration\n  // from the stored preference, and ThemeProvider keeps it reactive thereafter.\n  // suppressHydrationWarning: the script intentionally mutates the class before\n  // React hydrates, so a className mismatch on <html> is expected, not a bug.\n  // The app stylesheet is emitted via head().links and rendered by <HeadContent />.\n  //\n  // EC-523: `lang` is the ONE locale-dependent value that stays in the prerendered\n  // shell, and it must. There is no locale-free value for it, and dropping it is a real\n  // accessibility regression (a screen reader picks its voice from the document\n  // language). It is baked as the build's default locale and flips to the visitor's\n  // after hydration — honest at every moment, since EC-513 made it name the language the\n  // chrome is actually rendered in. The mismatch it would otherwise raise is covered by\n  // the same `suppressHydrationWarning` the theme script needs. Do not \"fix\" it by\n  // hard-coding a value: that trades an attribute that is briefly stale for one that is\n  // permanently wrong.\n  return (\n    <html lang={htmlLang} className=\"dark\" suppressHydrationWarning>\n      <head>\n        <HeadContent />\n        <script dangerouslySetInnerHTML={{ __html: THEME_INIT_SCRIPT }} />\n      </head>\n      <body className=\"min-h-screen bg-background font-sans text-foreground antialiased\">\n        {children}\n        <Scripts />\n      </body>\n    </html>\n  )\n}\n"]}
+{"version":3,"file":"root.js","sourceRoot":"","sources":["../../src/router/root.tsx"],"names":[],"mappings":";AACA,OAAO,EACL,eAAe,EACf,WAAW,EACX,MAAM,EACN,OAAO,EACP,WAAW,GACZ,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAA;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAA;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC7D,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAyDhD,MAAM,UAAU,qBAAqB,CAAC,OAA+B;IACnE,MAAM,EAAE,SAAS,EAAE,KAAK,GAAG,QAAQ,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;IAE3F,4EAA4E;IAC5E,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,kEAAkE;IAClE,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAEzB,SAAS,aAAa;QACpB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;QAC9B,gFAAgF;QAChF,6EAA6E;QAC7E,kFAAkF;QAClF,oFAAoF;QACpF,kFAAkF;QAClF,kFAAkF;QAClF,+EAA+E;QAC/E,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;QAC9B,6EAA6E;QAC7E,yEAAyE;QACzE,0EAA0E;QAC1E,8EAA8E;QAC9E,yEAAyE;QACzE,6EAA6E;QAC7E,MAAM,UAAU,GAAG,qBAAqB,CACtC,QAAQ,CAAC,QAAQ,EAChB,QAAQ,CAAC,MAAgC,CAAC,QAAQ,CACpD,CAAA;QACD,oBAAoB,CAAC,UAAU,CAAC,CAAA;QAEhC,OAAO,CACL,KAAC,YAAY,IAAC,QAAQ,EAAE,QAAQ,IAAI,QAAQ,YAC1C,KAAC,aAAa,cAOZ,KAAC,mBAAmB,cAClB,KAAC,YAAY,cACX,KAAC,QAAQ,cACP,MAAC,cAAc,eACZ,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAC,MAAM,KAAG,CAAC,CAAC,CAAC,CAAC,KAAC,MAAM,KAAG,EAK/C,KAAC,qBAAqB,KAAG,IACV,GACR,IAVM,UAAU,IAAI,cAAc,CAWhC,GACK,GACR,GACH,CAChB,CAAA;IACH,CAAC;IAED,OAAO,eAAe,CAAC;QACrB,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YACX,IAAI,EAAE;gBACJ,EAAE,OAAO,EAAE,OAAO,EAAE;gBACpB,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,qCAAqC,EAAE;gBACpE,EAAE,KAAK,EAAE;gBACT,GAAG,IAAI;aACR;YACD,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,KAAK,CAAC;SAC1D,CAAC;QACF,SAAS,EAAE,aAAa;KACzB,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,EAAE,QAAQ,EAA2B;IACrD,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAA;IAC5B,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;IAC9B,6EAA6E;IAC7E,0EAA0E;IAC1E,0EAA0E;IAC1E,2EAA2E;IAC3E,uEAAuE;IACvE,0EAA0E;IAC1E,yEAAyE;IACzE,iEAAiE;IACjE,MAAM,WAAW,GAAI,QAAQ,CAAC,MAAiC,CAAC,QAAQ,CAAA;IACxE,MAAM,QAAQ,GAAG,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1E,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;IAEvE,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,KAAC,cAAc,KAAG,CAAA;IAC1D,IAAI,QAAQ,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;QAC5C,0EAA0E;QAC1E,0EAA0E;QAC1E,4CAA4C;QAC5C,OAAO,KAAC,YAAY,IAAC,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,OAAO,SAAG,CAAA;IAC5F,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,eAAe;QAAE,OAAO,KAAC,YAAY,IAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,SAAG,CAAA;IAC3F,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;IAC9B,MAAM,CAAC,GAAG,IAAI,EAAE,CAAA;IAChB,OAAO,CACL,eAAK,SAAS,EAAC,iDAAiD,EAAC,IAAI,EAAC,QAAQ,aAC5E,KAAC,OAAO,IAAC,SAAS,EAAC,2CAA2C,iBAAa,MAAM,GAAG,EACnF,QAAQ,CAAC,CAAC,CAAC,eAAM,SAAS,EAAC,SAAS,YAAE,CAAC,CAAC,2BAA2B,CAAC,GAAQ,CAAC,CAAC,CAAC,IAAI,IAChF,CACP,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAA6C;IACrF,2EAA2E;IAC3E,8EAA8E;IAC9E,8EAA8E;IAC9E,4EAA4E;IAC5E,kFAAkF;IAClF,EAAE;IACF,iFAAiF;IACjF,sFAAsF;IACtF,8EAA8E;IAC9E,kFAAkF;IAClF,uFAAuF;IACvF,sFAAsF;IACtF,iFAAiF;IACjF,sFAAsF;IACtF,qBAAqB;IACrB,OAAO,CACL,gBAAM,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAC,MAAM,EAAC,wBAAwB,mBAC7D,2BACE,KAAC,WAAW,KAAG,EACf,iBAAQ,uBAAuB,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAI,IAC7D,EACP,gBAAM,SAAS,EAAC,kEAAkE,aAC/E,QAAQ,EACT,KAAC,OAAO,KAAG,IACN,IACF,CACR,CAAA;AACH,CAAC","sourcesContent":["import type { ReactNode } from 'react'\nimport {\n  createRootRoute,\n  HeadContent,\n  Outlet,\n  Scripts,\n  useLocation,\n} from '@tanstack/react-router'\nimport { NavigateOnce } from './navigate-once'\nimport { AuthProvider, useAuth } from '../components/auth-context'\nimport { DeploymentSetupGate } from '../components/deployment-setup-gate'\nimport { SessionExpiredOverlay } from '../components/session-expired-overlay'\nimport { StudioProvider } from '../components/studio-context'\nimport { ThemeProvider } from '../components/theme-context'\nimport { Loader2 } from 'lucide-react'\nimport { SIGN_IN_PATH, resolveRouteGuard } from '../lib/auth'\nimport { useHydrated, useT, useUiLocale } from '../lib/i18n'\nimport { setStudioBaseTitle } from '../lib/tab-title'\nimport { activeSlugForLocation, setActiveProjectSlug } from '../lib/workspace'\nimport { THEME_INIT_SCRIPT } from '../lib/theme'\n\n/**\n * Studio root-route boot factory (EC-375; consolidated from the copy-pasted\n * consumer `__root.tsx` by EC-369 finding #7). It assembles the ONE canonical\n * provider/gate stack — ThemeProvider → DeploymentSetupGate → AuthProvider(keyed)\n * → AuthGate → StudioProvider → Outlet — plus the `RootDocument` shell\n * (html/head with the pre-hydration theme script + the chrome stylesheet).\n *\n * Its whole purpose is to make the NEXT required-gate addition automatic on\n * package upgrade: when EC-258 added `DeploymentSetupGate`, every hand-copied\n * `__root.tsx` had to be manually re-synced, and Konditorei's silently missed\n * it for five releases (EC-367). Owning the composition here means a consumer's\n * `__root.tsx` shrinks to a thin shell and picks up new gates for free.\n *\n * The consumer re-exports the returned route as `Route` (the generated route\n * tree imports `Route` from `./routes/__root`):\n *\n * ```tsx\n * import { createStudioRootRoute } from '@elytracms/studio/router/root'\n * import appCss from '../styles/app.css?url'\n * export const Route = createStudioRootRoute({ appCssUrl: appCss })\n * ```\n */\nexport interface StudioRootRouteOptions {\n  /**\n   * URL of the studio chrome stylesheet, from the consumer's Vite `?url` import\n   * (`import appCss from '../styles/app.css?url'`). The one option every consumer\n   * must pass — the sheet is project-owned (it carries the delivery theme).\n   */\n  appCssUrl: string\n  /** Document `<title>`. Default: `'Elytra'`. */\n  title?: string\n  /**\n   * `<html lang>`. Defaults to the **resolved studio-UI locale** (EC-513): the\n   * config-pinned `i18n.locale` if there is one, otherwise the default locale on the\n   * server and, once browser detection takes over after hydration, the visitor's\n   * preferred locale. Pass a value only to fix `lang` to something the chrome is not\n   * actually rendered in.\n   */\n  htmlLang?: string\n  /**\n   * Extra `<head>` meta entries appended after the defaults (charset, viewport,\n   * title). Same shape TanStack Router's `head().meta` takes.\n   */\n  meta?: Array<Record<string, string>>\n  /** Extra `<head>` link entries appended after the app stylesheet. */\n  links?: Array<Record<string, string>>\n  /**\n   * Escape hatch: wrap additional project-specific providers around the routed\n   * subtree. Rendered INSIDE `StudioProvider` and around `<Outlet />`, so nested\n   * providers see the full studio/auth/theme context and remount with the active\n   * project. Return the passed `children` wrapped in your providers.\n   */\n  providers?: (children: ReactNode) => ReactNode\n}\n\nexport function createStudioRootRoute(options: StudioRootRouteOptions) {\n  const { appCssUrl, title = 'Elytra', htmlLang, meta = [], links = [], providers } = options\n\n  // EC-402: register the base title for the shell's per-view tab-title effect\n  // (`StudioTabTitle` composes `deepest crumb · view · project · <this title>`\n  // and restores exactly this value when leaving a project view). Module-holder\n  // seam — same pattern as `setActiveProjectSlug` — so the shell never has to\n  // capture `document.title` and race the router's own head effect.\n  setStudioBaseTitle(title)\n\n  function RootComponent() {\n    const location = useLocation()\n    // EC-513: locale resolution is client-side, so the studio boots in the server's\n    // locale (default, or the `i18n.locale` pin) and hands over to the browser's\n    // preference AFTER hydration — the hydration render has to reproduce the server's\n    // markup or React discards the tree with a mismatch error. Subscribing HERE, at the\n    // one root above the whole chrome, is what makes the handover visible everywhere:\n    // ~948 of the studio's localized render sites call the non-hook `translate()` and\n    // would otherwise never re-render for it. It also keeps `<html lang>` honest —\n    // it names the language the chrome is actually rendered in, at every moment.\n    const uiLocale = useUiLocale()\n    // EC-179: the active project selects its Convex backend. Resolve it from the\n    // URL (or the sign-in redirect target) and bind it *before* the auth and\n    // persistence adapters are selected, so the initial sign-in authenticates\n    // against the project the user is heading for. Keying the auth/studio subtree\n    // by the active project remounts it on a project switch, so the adapters\n    // re-select against the new backend and the session is restored per-backend.\n    const activeSlug = activeSlugForLocation(\n      location.pathname,\n      (location.search as { redirect?: string }).redirect,\n    )\n    setActiveProjectSlug(activeSlug)\n\n    return (\n      <RootDocument htmlLang={htmlLang ?? uiLocale}>\n        <ThemeProvider>\n          {/* EC-258: one deployment-setup gate runs before auth — a misconfigured or\n              unreachable backend, an invalid workspace config, or any failing readiness\n              precondition (missing auth signing key, required collections, …) is a\n              single visible boot screen with copy-pasteable fixes, never a silent\n              in-memory fallback or a misleading downstream error. All checks passing\n              renders children as before. */}\n          <DeploymentSetupGate>\n            <AuthProvider key={activeSlug ?? '__launcher__'}>\n              <AuthGate>\n                <StudioProvider>\n                  {providers ? providers(<Outlet />) : <Outlet />}\n                  {/* EC-403: the blocking in-place re-auth overlay — mounted over\n                      every route, INSIDE StudioProvider (it invalidates the studio\n                      query cache on re-auth) and inside AuthProvider (it reads the\n                      sessionExpired state). Renders null unless the session died. */}\n                  <SessionExpiredOverlay />\n                </StudioProvider>\n              </AuthGate>\n            </AuthProvider>\n          </DeploymentSetupGate>\n        </ThemeProvider>\n      </RootDocument>\n    )\n  }\n\n  return createRootRoute({\n    head: () => ({\n      meta: [\n        { charSet: 'utf-8' },\n        { name: 'viewport', content: 'width=device-width, initial-scale=1' },\n        { title },\n        ...meta,\n      ],\n      links: [{ rel: 'stylesheet', href: appCssUrl }, ...links],\n    }),\n    component: RootComponent,\n  })\n}\n\n/**\n * Route guard (EC-150): one chokepoint in the root layout. Unauthenticated\n * visitors on protected paths are redirected to the sign-in screen (with the\n * intended target preserved); signed-in users never see the sign-in screen.\n * The decision logic is the pure, unit-tested `resolveRouteGuard`.\n */\nfunction AuthGate({ children }: { children: ReactNode }) {\n  const { status } = useAuth()\n  const location = useLocation()\n  // EC-451: feed the still-pending `?redirect` search param into the decision.\n  // Dev auto-login (or any fast real sign-in — SSO return, password-manager\n  // autofill) can flip the session to signed-in while the location is still\n  // `/sign-in?redirect=…`, BEFORE `SignInView`'s own post-sign-in navigation\n  // runs; the gate's bounce then fires first and must consume the target\n  // instead of dropping it on an unconditional `/`. The target is validated\n  // by `postSignInTarget` inside `resolveRouteGuard` (same-origin relative\n  // paths only — redirect is an attacker-suppliable search param).\n  const rawRedirect = (location.search as { redirect?: unknown }).redirect\n  const redirect = typeof rawRedirect === 'string' ? rawRedirect : undefined\n  const decision = resolveRouteGuard(location.pathname, status, redirect)\n\n  if (decision.kind === 'pending') return <SessionLoading />\n  if (decision.kind === 'redirect-to-sign-in') {\n    // EC-441: `NavigateOnce`, not `<Navigate>` — the gate stays mounted while\n    // the sign-in transition is pending, and a per-render re-navigate spirals\n    // into the router's update-depth rejection.\n    return <NavigateOnce to={SIGN_IN_PATH} search={{ redirect: decision.redirect }} replace />\n  }\n  if (decision.kind === 'redirect-home') return <NavigateOnce to={decision.target} replace />\n  return children\n}\n\n/**\n * The studio's boot screen: the deterministic session-restore state and — because a\n * request-less render always finds the auth gate `pending` — the entire body of the\n * build-time prerendered SPA shell (`dist/client/_shell.html`).\n *\n * **It is deliberately wordless** (EC-523; owner-ratified 2026-08-01: *\"remove the text\n * — if we really need something while loading, add a simple spinner, but not mandatory —\n * the shell should stay free of side-effects\"*). A build-time prerender has no request,\n * hence no `Accept-Language` and no session, so it cannot know the visitor's language.\n * EC-513 fixed the one string that flipped after hydration; removing the words removes\n * the possibility of the next one.\n *\n * **Accessibility**, because \"no words\" must not mean \"no accessible name\": moving the\n * text into an `aria-label` bakes the very same wrong-language string into the shell,\n * only somewhere a screen-reader user cannot notice it flip. So the shell ships an\n * **empty** `role=\"status\"` region — the correct live-region shape in any case, since a\n * region must already exist in the DOM for a later insertion to be announced — and\n * `useHydrated` fills it once hydration is done, in the visitor's actual locale. The\n * unannounced window is bounded by hydration, i.e. exactly the window in which no\n * announcement could have been correct.\n *\n * Do **not** add `aria-busy` here: on a live region it tells assistive tech to withhold\n * updates, which would suppress the very announcement this shape exists to deliver.\n *\n * Exported so the shell's pre-hydration markup is pinnable with `renderToStaticMarkup`\n * (`root.test.tsx`) — the built artefact is the real proof, but nothing else in the\n * node test pattern can reach this render.\n */\nexport function SessionLoading() {\n  const hydrated = useHydrated()\n  const t = useT()\n  return (\n    <div className=\"grid min-h-dvh place-items-center bg-background\" role=\"status\">\n      <Loader2 className=\"size-6 animate-spin text-muted-foreground\" aria-hidden=\"true\" />\n      {hydrated ? <span className=\"sr-only\">{t('auth.boot.checkingSession')}</span> : null}\n    </div>\n  )\n}\n\nfunction RootDocument({ children, htmlLang }: { children: ReactNode; htmlLang: string }) {\n  // Dark-first SSR baseline; THEME_INIT_SCRIPT flips the class pre-hydration\n  // from the stored preference, and ThemeProvider keeps it reactive thereafter.\n  // suppressHydrationWarning: the script intentionally mutates the class before\n  // React hydrates, so a className mismatch on <html> is expected, not a bug.\n  // The app stylesheet is emitted via head().links and rendered by <HeadContent />.\n  //\n  // EC-523: `lang` is the ONE locale-dependent value that stays in the prerendered\n  // shell, and it must. There is no locale-free value for it, and dropping it is a real\n  // accessibility regression (a screen reader picks its voice from the document\n  // language). It is baked as the build's default locale and flips to the visitor's\n  // after hydration — honest at every moment, since EC-513 made it name the language the\n  // chrome is actually rendered in. The mismatch it would otherwise raise is covered by\n  // the same `suppressHydrationWarning` the theme script needs. Do not \"fix\" it by\n  // hard-coding a value: that trades an attribute that is briefly stale for one that is\n  // permanently wrong.\n  return (\n    <html lang={htmlLang} className=\"dark\" suppressHydrationWarning>\n      <head>\n        <HeadContent />\n        <script dangerouslySetInnerHTML={{ __html: THEME_INIT_SCRIPT }} />\n      </head>\n      <body className=\"min-h-screen bg-background font-sans text-foreground antialiased\">\n        {children}\n        <Scripts />\n      </body>\n    </html>\n  )\n}\n"]}

package/dist/ui/badge.d.ts

@@ -1,7 +1,7 @@
 import { type VariantProps } from 'class-variance-authority';
 import type { HTMLAttributes } from 'react';
 export declare const badgeVariants: (props?: ({
-    variant?: "error" | "default" | "warning" | "success" | "primary" | "outline" | "info" | null | undefined;
+    variant?: "default" | "primary" | "error" | "outline" | "success" | "warning" | "info" | null | undefined;
 } & import("class-variance-authority/types").ClassProp) | undefined) => string;
 export interface BadgeProps extends HTMLAttributes<HTMLSpanElement>, VariantProps<typeof badgeVariants> {
 }

package/dist/ui/button.d.ts

@@ -1,8 +1,8 @@
 import { type VariantProps } from 'class-variance-authority';
 import type { ButtonHTMLAttributes } from 'react';
 export declare const buttonVariants: (props?: ({
-    variant?: "default" | "link" | "secondary" | "outline" | "ghost" | "destructive" | null | undefined;
-    size?: "default" | "sm" | "lg" | "icon" | "icon-sm" | null | undefined;
+    variant?: "link" | "default" | "secondary" | "outline" | "ghost" | "destructive" | null | undefined;
+    size?: "sm" | "lg" | "default" | "icon" | "icon-sm" | null | undefined;
 } & import("class-variance-authority/types").ClassProp) | undefined) => string;
 export interface ButtonProps extends ButtonHTMLAttributes<HTMLButtonElement>, VariantProps<typeof buttonVariants> {
     asChild?: boolean;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@elytracms/studio",
   "author": "finaldream <hi@finaldream.de>",
-  "version": "0.0.92",
+  "version": "0.0.94",
   "engines": {
     "node": ">=22.18.0"
   },
@@ -15,6 +15,14 @@
       "types": "./dist/customization.d.ts",
       "default": "./dist/customization.js"
     },
+    "./addon": {
+      "types": "./dist/addon.d.ts",
+      "default": "./dist/addon.js"
+    },
+    "./mount": {
+      "types": "./dist/mount.d.ts",
+      "default": "./dist/mount.js"
+    },
     "./ui": {
       "types": "./dist/ui/index.d.ts",
       "default": "./dist/ui/index.js"
@@ -35,10 +43,6 @@
       "types": "./dist/components/builder/canvas-stylesheet.d.ts",
       "default": "./dist/components/builder/canvas-stylesheet.js"
     },
-    "./components/*": {
-      "types": "./dist/components/*.d.ts",
-      "default": "./dist/components/*.js"
-    },
     "./lib/assets": {
       "types": "./dist/lib/assets/index.d.ts",
       "default": "./dist/lib/assets/index.js"
@@ -63,6 +67,10 @@
       "types": "./dist/lib/ai/index.d.ts",
       "default": "./dist/lib/ai/index.js"
     },
+    "./lib/ai/vite": {
+      "types": "./dist/lib/ai/vite.d.ts",
+      "default": "./dist/lib/ai/vite.js"
+    },
     "./lib/registry": {
       "types": "./dist/lib/registry/index.d.ts",
       "default": "./dist/lib/registry/index.js"
@@ -99,10 +107,6 @@
       "types": "./dist/lib/auth/index.d.ts",
       "default": "./dist/lib/auth/index.js"
     },
-    "./lib/*": {
-      "types": "./dist/lib/*.d.ts",
-      "default": "./dist/lib/*.js"
-    },
     "./previews/enumerate": {
       "types": "./dist/previews/enumerate.d.ts",
       "default": "./dist/previews/enumerate.js"
@@ -149,7 +153,7 @@
     "lucide-react": "^1.23.0",
     "tailwind-merge": "^3.6.0",
     "zod": "^4.4.3",
-    "@elytracms/core": "^0.0.92"
+    "@elytracms/core": "^0.0.94"
   },
   "peerDependencies": {
     "@tanstack/react-router": "^1.170.0",
@@ -173,7 +177,7 @@
     "react-dom": "^19.2.7",
     "typescript": "^6.0.3",
     "vite": "^8.1.3",
-    "@elytracms/components": "^0.0.92"
+    "@elytracms/components": "^0.0.94"
   },
   "scripts": {
     "build": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\" && tsc -p tsconfig.build.json && node ../../scripts/fix-esm-extensions.mjs dist && node ../../scripts/check-esm-extensions.mjs dist",

package/dist/components/cms/cms-composition-validators.d.ts

@@ -1,16 +0,0 @@
-import type { BlocksFieldDef, CompositionIssue, RichTextFieldDef } from '@elytracms/core/cms-core';
-/**
- * EC-188: validate a `blocks` composition field value against the field's `allow`
- * vocabulary + the code-owned component registry (the leash), mapping graph
- * issues into plain CMS findings. Never throws — a malformed value degrades to
- * a single finding, matching the "validation is first-class, never a crash"
- * rule.
- */
-export declare function validateComposition(value: unknown, field: BlocksFieldDef): CompositionIssue[];
-/**
- * EC-189: validate the composition nodes inside a `richText` field value with
- * the SAME leash a `blocks` field uses — since EC-547 literally the same walk
- * over the same shape: the value's `elytra/component` nodes ARE sequence
- * citizens, at the top level and nested in typography content.
- */
-export declare function validateRichTextEmbeds(value: unknown, field: RichTextFieldDef): CompositionIssue[];

package/dist/components/cms/cms-composition-validators.js

@@ -1,133 +0,0 @@
-import { legacyNodeMemberIssues, validateCompositionValue } from '@elytracms/core/project-graph';
-import { BLOCK_SEQUENCE_VERSION, classifyBlockNode, isBlockSequenceValueShape, parseBlockSequenceValue, } from '@elytracms/core/rich-text';
-import { getStudioRegistry } from '@elytracms/studio/lib/registry';
-/**
- * Composition validator adapters (EC-326, extracted from `cms-store.tsx`) —
- * injected into `validateDocument`'s `validateComposition`/`validateRichTextEmbeds`
- * options so `@elytracms/core/cms-core` stays free of `@elytracms/core/project-graph`
- * and `@elytracms/core/rich-text`.
- *
- * EC-547 (EC-500 D1/D4): both field types now share ONE stored shape — the v2
- * block sequence `{ version: 2, content: BlockNode[] }` — and therefore ONE
- * validation walk: unwrap the envelope, validate the sequence's component nodes
- * (top-level roots AND nodes nested inside typography content) against the
- * field's `allow` vocabulary + the code-owned component registry. "`allow`
- * means component ids insertable at this position" is now literally the same
- * check on the same shape for `blocks` and `richText`.
- *
- * Pre-convergence shapes (the v1 `{ version, doc }` envelope, bare node lists)
- * never reach these adapters: `validateDocument`'s shape pass reports them as
- * the explicit pre-convergence issue and skips the deeper validators (EC-548
- * removed the legacy walks). A retired `componentEmbed` node riding in v2
- * content is a foreign typography node — not rendered, not validated, surfaced
- * by the renderer's unknown-node fallback (render/validate parity, EC-497).
- */
-/**
- * Validate the component nodes of a v2 block sequence against the field leash.
- *
- * - Top-level component roots validate in ONE `validateCompositionValue` call,
- *   so cross-root checks (duplicate node ids) see the whole sequence. Their
- *   `root/<k>` issue paths are re-keyed to the node's actual sequence index
- *   (`content/<i>/…`).
- * - A component nested in typography content validates per-node with the SAME
- *   leash, its findings prefixed with the typography path
- *   (`content/<i>/content/<j>/…`).
- * - A malformed value degrades to a single finding, never a crash.
- */
-function validateBlockSequence(value, allow) {
-    // Structural gate FIRST: only the stored `{ version: 2, content }` object is a
-    // sequence here. The parser alone would also accept a JSON-string encoding of
-    // one — which no delivery reader accepts — and validating that clean would be
-    // the invisible divergence EC-390 exists to prevent.
-    if (!isBlockSequenceValueShape(value)) {
-        return [
-            {
-                message: `is not a valid block sequence (version ${BLOCK_SEQUENCE_VERSION})`,
-                severity: 'error',
-            },
-        ];
-    }
-    // EC-574: retired node members (a render `condition`, a `kind: 'binding'` prop)
-    // are judged on the value AS STORED, before the parse below — the parser strips
-    // a stray `condition` silently and rejects a binding prop only generically, so
-    // this is the one place the stored shape is still visible to name precisely.
-    const out = legacyNodeMemberIssues(value).map((issue) => ({
-        message: issue.message,
-        severity: issue.severity,
-        nodePath: issue.path.join('/'),
-    }));
-    const parsed = parseBlockSequenceValue(value);
-    if (!parsed.ok) {
-        return [
-            ...out,
-            {
-                message: `is not a valid block sequence (version ${BLOCK_SEQUENCE_VERSION})`,
-                severity: 'error',
-            },
-        ];
-    }
-    const components = getStudioRegistry().registry.lookup;
-    const opts = { ...(allow ? { allow } : {}), components };
-    /** `root/0/<rest>` from a single-node validation call → `<base>/<rest>`. */
-    const nestedPath = (base, path) => {
-        const rest = path.slice(2);
-        return rest.length > 0 ? `${base}/${rest.join('/')}` : base;
-    };
-    const walkTypography = (nodes, base) => {
-        nodes?.forEach((child, i) => {
-            const here = `${base}/content/${i}`;
-            const kind = classifyBlockNode(child);
-            if (kind.kind === 'component') {
-                for (const issue of validateCompositionValue(kind.node, opts)) {
-                    out.push({ message: issue.message, severity: issue.severity, nodePath: nestedPath(here, issue.path) });
-                }
-            }
-            else {
-                walkTypography(kind.node.content, here);
-            }
-        });
-    };
-    const roots = [];
-    parsed.value.content.forEach((node, index) => {
-        const kind = classifyBlockNode(node);
-        if (kind.kind === 'component')
-            roots.push({ node: kind.node, index });
-        else
-            walkTypography(kind.node.content, `content/${index}`);
-    });
-    for (const issue of validateCompositionValue(roots.map((r) => r.node), opts)) {
-        // path is `['root', <k>, ...rest]` — re-key <k> to the sequence index.
-        const [, k, ...rest] = issue.path;
-        const index = typeof k === 'number' ? (roots[k]?.index ?? k) : k;
-        out.push({
-            message: issue.message,
-            severity: issue.severity,
-            nodePath: ['content', ...(index === undefined ? [] : [index]), ...rest].join('/'),
-        });
-    }
-    return out;
-}
-/**
- * EC-188: validate a `blocks` composition field value against the field's `allow`
- * vocabulary + the code-owned component registry (the leash), mapping graph
- * issues into plain CMS findings. Never throws — a malformed value degrades to
- * a single finding, matching the "validation is first-class, never a crash"
- * rule.
- */
-export function validateComposition(value, field) {
-    if (value == null)
-        return [];
-    return validateBlockSequence(value, field.allow);
-}
-/**
- * EC-189: validate the composition nodes inside a `richText` field value with
- * the SAME leash a `blocks` field uses — since EC-547 literally the same walk
- * over the same shape: the value's `elytra/component` nodes ARE sequence
- * citizens, at the top level and nested in typography content.
- */
-export function validateRichTextEmbeds(value, field) {
-    if (value == null)
-        return [];
-    return validateBlockSequence(value, field.allow);
-}
-//# sourceMappingURL=cms-composition-validators.js.map

package/dist/components/cms/cms-composition-validators.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cms-composition-validators.js","sourceRoot":"","sources":["../../../src/components/cms/cms-composition-validators.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AAEhG,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,2BAA2B,CAAA;AAElC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAElE;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;;;;;;;;;;;GAWG;AACH,SAAS,qBAAqB,CAC5B,KAAc,EACd,KAAoC;IAEpC,+EAA+E;IAC/E,8EAA8E;IAC9E,8EAA8E;IAC9E,qDAAqD;IACrD,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO;YACL;gBACE,OAAO,EAAE,0CAA0C,sBAAsB,GAAG;gBAC5E,QAAQ,EAAE,OAAO;aAClB;SACF,CAAA;IACH,CAAC;IACD,gFAAgF;IAChF,gFAAgF;IAChF,+EAA+E;IAC/E,6EAA6E;IAC7E,MAAM,GAAG,GAAuB,sBAAsB,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5E,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;KAC/B,CAAC,CAAC,CAAA;IACH,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAA;IAC7C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO;YACL,GAAG,GAAG;YACN;gBACE,OAAO,EAAE,0CAA0C,sBAAsB,GAAG;gBAC5E,QAAQ,EAAE,OAAO;aAClB;SACF,CAAA;IACH,CAAC;IACD,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAA;IACtD,MAAM,IAAI,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,CAAA;IAExD,4EAA4E;IAC5E,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,IAAoC,EAAU,EAAE;QAChF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC1B,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IAC7D,CAAC,CAAA;IAED,MAAM,cAAc,GAAG,CAAC,KAAuC,EAAE,IAAY,EAAQ,EAAE;QACrF,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YAC1B,MAAM,IAAI,GAAG,GAAG,IAAI,YAAY,CAAC,EAAE,CAAA;YACnC,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;YACrC,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC9B,KAAK,MAAM,KAAK,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;oBAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBACxG,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YACzC,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,MAAM,KAAK,GAA6C,EAAE,CAAA;IAC1D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;QACpC,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;;YAChE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,KAAK,EAAE,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;IAEF,KAAK,MAAM,KAAK,IAAI,wBAAwB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;QAC7E,uEAAuE;QACvE,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAA;QACjC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAChE,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;SAClF,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,KAAqB;IACvE,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,EAAE,CAAA;IAC5B,OAAO,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;AAClD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,KAAuB;IAC5E,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,EAAE,CAAA;IAC5B,OAAO,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;AAClD,CAAC","sourcesContent":["import type { BlocksFieldDef, CompositionIssue, RichTextFieldDef } from '@elytracms/core/cms-core'\nimport { legacyNodeMemberIssues, validateCompositionValue } from '@elytracms/core/project-graph'\nimport type { ComponentNode } from '@elytracms/core/project-graph'\nimport {\n  BLOCK_SEQUENCE_VERSION,\n  classifyBlockNode,\n  isBlockSequenceValueShape,\n  parseBlockSequenceValue,\n} from '@elytracms/core/rich-text'\nimport type { BlockNode } from '@elytracms/core/rich-text'\nimport { getStudioRegistry } from '@elytracms/studio/lib/registry'\n\n/**\n * Composition validator adapters (EC-326, extracted from `cms-store.tsx`) —\n * injected into `validateDocument`'s `validateComposition`/`validateRichTextEmbeds`\n * options so `@elytracms/core/cms-core` stays free of `@elytracms/core/project-graph`\n * and `@elytracms/core/rich-text`.\n *\n * EC-547 (EC-500 D1/D4): both field types now share ONE stored shape — the v2\n * block sequence `{ version: 2, content: BlockNode[] }` — and therefore ONE\n * validation walk: unwrap the envelope, validate the sequence's component nodes\n * (top-level roots AND nodes nested inside typography content) against the\n * field's `allow` vocabulary + the code-owned component registry. \"`allow`\n * means component ids insertable at this position\" is now literally the same\n * check on the same shape for `blocks` and `richText`.\n *\n * Pre-convergence shapes (the v1 `{ version, doc }` envelope, bare node lists)\n * never reach these adapters: `validateDocument`'s shape pass reports them as\n * the explicit pre-convergence issue and skips the deeper validators (EC-548\n * removed the legacy walks). A retired `componentEmbed` node riding in v2\n * content is a foreign typography node — not rendered, not validated, surfaced\n * by the renderer's unknown-node fallback (render/validate parity, EC-497).\n */\n\n/**\n * Validate the component nodes of a v2 block sequence against the field leash.\n *\n * - Top-level component roots validate in ONE `validateCompositionValue` call,\n *   so cross-root checks (duplicate node ids) see the whole sequence. Their\n *   `root/<k>` issue paths are re-keyed to the node's actual sequence index\n *   (`content/<i>/…`).\n * - A component nested in typography content validates per-node with the SAME\n *   leash, its findings prefixed with the typography path\n *   (`content/<i>/content/<j>/…`).\n * - A malformed value degrades to a single finding, never a crash.\n */\nfunction validateBlockSequence(\n  value: unknown,\n  allow: readonly string[] | undefined,\n): CompositionIssue[] {\n  // Structural gate FIRST: only the stored `{ version: 2, content }` object is a\n  // sequence here. The parser alone would also accept a JSON-string encoding of\n  // one — which no delivery reader accepts — and validating that clean would be\n  // the invisible divergence EC-390 exists to prevent.\n  if (!isBlockSequenceValueShape(value)) {\n    return [\n      {\n        message: `is not a valid block sequence (version ${BLOCK_SEQUENCE_VERSION})`,\n        severity: 'error',\n      },\n    ]\n  }\n  // EC-574: retired node members (a render `condition`, a `kind: 'binding'` prop)\n  // are judged on the value AS STORED, before the parse below — the parser strips\n  // a stray `condition` silently and rejects a binding prop only generically, so\n  // this is the one place the stored shape is still visible to name precisely.\n  const out: CompositionIssue[] = legacyNodeMemberIssues(value).map((issue) => ({\n    message: issue.message,\n    severity: issue.severity,\n    nodePath: issue.path.join('/'),\n  }))\n  const parsed = parseBlockSequenceValue(value)\n  if (!parsed.ok) {\n    return [\n      ...out,\n      {\n        message: `is not a valid block sequence (version ${BLOCK_SEQUENCE_VERSION})`,\n        severity: 'error',\n      },\n    ]\n  }\n  const components = getStudioRegistry().registry.lookup\n  const opts = { ...(allow ? { allow } : {}), components }\n\n  /** `root/0/<rest>` from a single-node validation call → `<base>/<rest>`. */\n  const nestedPath = (base: string, path: ReadonlyArray<string | number>): string => {\n    const rest = path.slice(2)\n    return rest.length > 0 ? `${base}/${rest.join('/')}` : base\n  }\n\n  const walkTypography = (nodes: readonly BlockNode[] | undefined, base: string): void => {\n    nodes?.forEach((child, i) => {\n      const here = `${base}/content/${i}`\n      const kind = classifyBlockNode(child)\n      if (kind.kind === 'component') {\n        for (const issue of validateCompositionValue(kind.node, opts)) {\n          out.push({ message: issue.message, severity: issue.severity, nodePath: nestedPath(here, issue.path) })\n        }\n      } else {\n        walkTypography(kind.node.content, here)\n      }\n    })\n  }\n\n  const roots: { node: ComponentNode; index: number }[] = []\n  parsed.value.content.forEach((node, index) => {\n    const kind = classifyBlockNode(node)\n    if (kind.kind === 'component') roots.push({ node: kind.node, index })\n    else walkTypography(kind.node.content, `content/${index}`)\n  })\n\n  for (const issue of validateCompositionValue(roots.map((r) => r.node), opts)) {\n    // path is `['root', <k>, ...rest]` — re-key <k> to the sequence index.\n    const [, k, ...rest] = issue.path\n    const index = typeof k === 'number' ? (roots[k]?.index ?? k) : k\n    out.push({\n      message: issue.message,\n      severity: issue.severity,\n      nodePath: ['content', ...(index === undefined ? [] : [index]), ...rest].join('/'),\n    })\n  }\n  return out\n}\n\n/**\n * EC-188: validate a `blocks` composition field value against the field's `allow`\n * vocabulary + the code-owned component registry (the leash), mapping graph\n * issues into plain CMS findings. Never throws — a malformed value degrades to\n * a single finding, matching the \"validation is first-class, never a crash\"\n * rule.\n */\nexport function validateComposition(value: unknown, field: BlocksFieldDef): CompositionIssue[] {\n  if (value == null) return []\n  return validateBlockSequence(value, field.allow)\n}\n\n/**\n * EC-189: validate the composition nodes inside a `richText` field value with\n * the SAME leash a `blocks` field uses — since EC-547 literally the same walk\n * over the same shape: the value's `elytra/component` nodes ARE sequence\n * citizens, at the top level and nested in typography content.\n */\nexport function validateRichTextEmbeds(value: unknown, field: RichTextFieldDef): CompositionIssue[] {\n  if (value == null) return []\n  return validateBlockSequence(value, field.allow)\n}\n"]}

package/dist/components/cms/publish-clean.d.ts

@@ -1,28 +0,0 @@
-import type { CmsDocument, CollectionDef, LocaleConfig } from '@elytracms/core/cms-core';
-import type { ManifestResolver } from '@elytracms/core/component-registry';
-/**
- * EC-425 — THE publish-time hidden-strip, extracted so single-document publish
- * (`doPublish`, use-publish-controller) and bulk publish (`runBulk`, cms-store)
- * share ONE clean step instead of the bulk bar bypassing it:
- *
- * - EC-273 `clearHiddenValues`: drop conditionally-hidden document field values
- *   (predicate-hidden, non-`retainWhenHidden`) from `values`/`localized`, each
- *   judged in the locale view the editor displayed (EC-580 — the strip sees what
- *   the editor saw, so it needs the project's `LocaleConfig`).
- * - EC-394 `clearHiddenProps`: the same strip for component props across every
- *   `blocks`/canvas composition, so a hidden relation/asset prop's ref leaves
- *   the EC-277 reference index (derived from the stored draft at the EC-286
- *   write chokepoint) and stops blocking its target's delete/unpublish.
- *
- * This is the projection point for "hidden means not delivered" (EC-565 Q3):
- * delivery stays predicate-free because the values are gone from the snapshot.
- *
- * The manifests AND the locale config resolve through the SESSION by default
- * (client-side-with-user-session, the ratified trust boundary — the registry
- * binding `doPublish` used inline since EC-394, and the project locales the CMS
- * session installs, EC-479). Both production callers pass the session's
- * `localeConfig` explicitly; tests inject a resolver to pin behaviour against
- * fixture manifests. Identity-preserving: returns the input document when
- * nothing clears, so callers can save-if-changed.
- */
-export declare function cleanHiddenForPublish(collection: CollectionDef, doc: CmsDocument, resolveManifest?: ManifestResolver, localeConfig?: LocaleConfig | undefined): CmsDocument;

package/dist/components/cms/publish-clean.js

@@ -1,38 +0,0 @@
-import { clearHiddenValues } from '@elytracms/core/cms-core';
-import { clearHiddenProps } from '@elytracms/core/component-registry';
-import { getStudioRegistry } from '@elytracms/studio/lib/registry';
-import { getStudioLocaleConfig } from '@elytracms/studio/lib/locale';
-/**
- * EC-425 — THE publish-time hidden-strip, extracted so single-document publish
- * (`doPublish`, use-publish-controller) and bulk publish (`runBulk`, cms-store)
- * share ONE clean step instead of the bulk bar bypassing it:
- *
- * - EC-273 `clearHiddenValues`: drop conditionally-hidden document field values
- *   (predicate-hidden, non-`retainWhenHidden`) from `values`/`localized`, each
- *   judged in the locale view the editor displayed (EC-580 — the strip sees what
- *   the editor saw, so it needs the project's `LocaleConfig`).
- * - EC-394 `clearHiddenProps`: the same strip for component props across every
- *   `blocks`/canvas composition, so a hidden relation/asset prop's ref leaves
- *   the EC-277 reference index (derived from the stored draft at the EC-286
- *   write chokepoint) and stops blocking its target's delete/unpublish.
- *
- * This is the projection point for "hidden means not delivered" (EC-565 Q3):
- * delivery stays predicate-free because the values are gone from the snapshot.
- *
- * The manifests AND the locale config resolve through the SESSION by default
- * (client-side-with-user-session, the ratified trust boundary — the registry
- * binding `doPublish` used inline since EC-394, and the project locales the CMS
- * session installs, EC-479). Both production callers pass the session's
- * `localeConfig` explicitly; tests inject a resolver to pin behaviour against
- * fixture manifests. Identity-preserving: returns the input document when
- * nothing clears, so callers can save-if-changed.
- */
-export function cleanHiddenForPublish(collection, doc, resolveManifest = sessionManifestResolver(), localeConfig = getStudioLocaleConfig() ?? undefined) {
-    return clearHiddenProps(collection, clearHiddenValues(collection, doc, localeConfig), resolveManifest);
-}
-/** The session component registry as a {@link ManifestResolver}. */
-function sessionManifestResolver() {
-    const { registry } = getStudioRegistry();
-    return (id) => registry.getManifest(id);
-}
-//# sourceMappingURL=publish-clean.js.map

package/dist/components/cms/publish-clean.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"publish-clean.js","sourceRoot":"","sources":["../../../src/components/cms/publish-clean.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAE5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAA;AAErE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAA;AAEpE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAyB,EACzB,GAAgB,EAChB,kBAAoC,uBAAuB,EAAE,EAC7D,eAAyC,qBAAqB,EAAE,IAAI,SAAS;IAE7E,OAAO,gBAAgB,CAAC,UAAU,EAAE,iBAAiB,CAAC,UAAU,EAAE,GAAG,EAAE,YAAY,CAAC,EAAE,eAAe,CAAC,CAAA;AACxG,CAAC;AAED,oEAAoE;AACpE,SAAS,uBAAuB;IAC9B,MAAM,EAAE,QAAQ,EAAE,GAAG,iBAAiB,EAAE,CAAA;IACxC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;AACzC,CAAC","sourcesContent":["import { clearHiddenValues } from '@elytracms/core/cms-core'\nimport type { CmsDocument, CollectionDef, LocaleConfig } from '@elytracms/core/cms-core'\nimport { clearHiddenProps } from '@elytracms/core/component-registry'\nimport type { ManifestResolver } from '@elytracms/core/component-registry'\nimport { getStudioRegistry } from '@elytracms/studio/lib/registry'\nimport { getStudioLocaleConfig } from '@elytracms/studio/lib/locale'\n\n/**\n * EC-425 — THE publish-time hidden-strip, extracted so single-document publish\n * (`doPublish`, use-publish-controller) and bulk publish (`runBulk`, cms-store)\n * share ONE clean step instead of the bulk bar bypassing it:\n *\n * - EC-273 `clearHiddenValues`: drop conditionally-hidden document field values\n *   (predicate-hidden, non-`retainWhenHidden`) from `values`/`localized`, each\n *   judged in the locale view the editor displayed (EC-580 — the strip sees what\n *   the editor saw, so it needs the project's `LocaleConfig`).\n * - EC-394 `clearHiddenProps`: the same strip for component props across every\n *   `blocks`/canvas composition, so a hidden relation/asset prop's ref leaves\n *   the EC-277 reference index (derived from the stored draft at the EC-286\n *   write chokepoint) and stops blocking its target's delete/unpublish.\n *\n * This is the projection point for \"hidden means not delivered\" (EC-565 Q3):\n * delivery stays predicate-free because the values are gone from the snapshot.\n *\n * The manifests AND the locale config resolve through the SESSION by default\n * (client-side-with-user-session, the ratified trust boundary — the registry\n * binding `doPublish` used inline since EC-394, and the project locales the CMS\n * session installs, EC-479). Both production callers pass the session's\n * `localeConfig` explicitly; tests inject a resolver to pin behaviour against\n * fixture manifests. Identity-preserving: returns the input document when\n * nothing clears, so callers can save-if-changed.\n */\nexport function cleanHiddenForPublish(\n  collection: CollectionDef,\n  doc: CmsDocument,\n  resolveManifest: ManifestResolver = sessionManifestResolver(),\n  localeConfig: LocaleConfig | undefined = getStudioLocaleConfig() ?? undefined,\n): CmsDocument {\n  return clearHiddenProps(collection, clearHiddenValues(collection, doc, localeConfig), resolveManifest)\n}\n\n/** The session component registry as a {@link ManifestResolver}. */\nfunction sessionManifestResolver(): ManifestResolver {\n  const { registry } = getStudioRegistry()\n  return (id) => registry.getManifest(id)\n}\n"]}

package/dist/components/redirects/redirects-collection-view-source.d.ts

@@ -1,53 +0,0 @@
-import type { CmsDocument, CollectionDef } from '@elytracms/core/cms-core';
-import type { RedirectEntry, SaveRedirectInput } from '@elytracms/core/persistence';
-import type { CollectionViewCapabilities, CollectionViewSource } from '@elytracms/studio/lib/collection-view/collection-view-source';
-/**
- * The capability profile of the redirects rail (EC-303): content-gated, create
- * + remove, no publish/versions/locales — redirects are CONTENT (an editor
- * owns them), so unlike the users rail this source allows `create`, is NOT
- * admin-only, and needs no principal field-access policy. Hoisted to a
- * module-level constant (EC-327), mirroring `ASSET_COLLECTION_CAPABILITIES`.
- */
-export declare const REDIRECT_COLLECTION_CAPABILITIES: CollectionViewCapabilities;
-/**
- * Project a stored redirect into the lens's `values` shape. EC-311 Tier 2:
- * additive schema fields round-trip through the open meta bag, spread FIRST so a
- * canonical column always wins over a same-named meta key (RESIDUE-3c, EC-577):
- * spread last, a stored `meta.to` displayed as the redirect's target and a
- * re-save wrote it into the canonical `to`. The record schema now refuses such a
- * key on write; this order keeps a row stored before that harmless.
- */
-export declare function redirectToDocument(entry: RedirectEntry): CmsDocument;
-/**
- * Map an edited lens document back to the redirect write (EC-577). A column the
- * document does not carry is left out of the write, so the stored value is kept:
- * `permanent`/`enabled` get their defaults only when the save CREATES the
- * redirect, applied once inside the adapter's transaction — this lens no longer
- * restates them (`?? true` here was the third copy of the default, RESIDUE-3b).
- * `from`/`to` are always sent: the editor owns them, and an empty one is refused
- * visibly by the write's validation rather than kept silently.
- */
-export declare function documentToSaveRedirect(doc: CmsDocument): SaveRedirectInput;
-/**
- * Assemble a {@link CollectionViewSource} for the **redirects rail** (EC-303) —
- * the portable list/edit surfaces over the editorial redirects store instead of
- * the CMS store. Redirects are CONTENT (an editor owns them), so unlike the users
- * rail this source allows `create`, is NOT admin-only, and needs no principal
- * field-access policy. No publish/versions/locales/inline/import — a redirect
- * is a small record saved explicitly (a saved+enabled one is live); bulk
- * delete rides the shared rail runner (EC-433).
- *
- * Must be mounted under a `RedirectsProvider` (for {@link useRedirects}).
- *
- * `schema` defaults to the engine-owned {@link redirectsCollectionDef}; a mount may
- * pass a customized def (EC-311 — built-in fields overridden by equal name via
- * `nav.redirects({ fields })`). The canonical `from`/`to`/`permanent`/`enabled`
- * names+types are contract-locked, so the projection helpers still read the same
- * canonical values; a mount's *additive* fields (Tier 2) round-trip through the
- * record's open `meta` bag ({@link documentToSaveRedirect}/{@link redirectToDocument}).
- *
- * The shared scaffold (`useRailViewSource`, EC-327) owns `viewState`/`lastError`
- * plumbing and the assembled source; this hook supplies only the redirects-store
- * reads/writes, the capability profile, and the registry-driven `validate`.
- */
-export declare function useRedirectsCollectionViewSource(projectId: string, schema?: CollectionDef): CollectionViewSource;