@elytracms/studio 0.0.92 → 0.0.94

package/convex/schema.ts

@@ -222,6 +222,12 @@ export default defineSchema({
     // EC-199 provenance: authoring origin ('assistant' for AI-authored content).
     // Additive scalar, outside the folded snapshot — invisible when unset.
     origin: v.optional(v.string()),
+    // EC-585: which mutation recorded the row — 'publish' (`publishDocument`, the only
+    // kind `publishDocumentVersion` pins) or 'snapshot' (`saveDocumentVersion`: a restore
+    // point). Optional ONLY for rows recorded before EC-585 (read through
+    // `isPinnableVersion`, which keeps a kind-less `label: 'published'` row pinnable). A
+    // top-level scalar beside the folded snapshot: it adds no nesting depth.
+    kind: v.optional(v.union(v.literal('publish'), v.literal('snapshot'))),
     createdAt: v.string(),
   })
     .index('by_doc', ['collection', 'docId'])
@@ -293,6 +299,36 @@ export default defineSchema({
     updatedAt: v.string(),
   }).index('by_redirect', ['redirectId']),
 
+  /**
+   * The generic RECORD STORE (EC-616) — one row per record of a DECLARED record kind
+   * (`defineRecordKind` in `@elytracms/core/persistence`): the engine's own kinds and
+   * every addon's. `data` holds the kind's columns + its open `meta` bag, validated by
+   * the kind's schema in the write path (`defineRecordFunctions`, `record-functions.ts`)
+   * — the data SHAPE, never project structure (EC-585 1e).
+   *
+   * The index slots are STATIC (a consumer re-exports this schema, so an addon can never
+   * add an index); a kind fills them from its own declared columns: `key1`/`key2` from
+   * its `keys`, `at` from its `time` column (else `createdAt`). The indexes are the
+   * known access paths: one record by id; a kind by time (recent-first lists, a TTL
+   * sweep); by either key + time (submissions by form or by status, newest first); by
+   * both keys + time (an aggregate by day + document).
+   */
+  records: defineTable({
+    kind: v.string(),
+    recordId: v.string(),
+    data: v.any(),
+    key1: v.optional(v.string()),
+    key2: v.optional(v.string()),
+    at: v.string(),
+    createdAt: v.string(),
+    updatedAt: v.string(),
+  })
+    .index('by_kind_record', ['kind', 'recordId'])
+    .index('by_kind_at', ['kind', 'at'])
+    .index('by_kind_key1', ['kind', 'key1', 'at'])
+    .index('by_kind_key2', ['kind', 'key2', 'at'])
+    .index('by_kind_keys', ['kind', 'key1', 'key2', 'at']),
+
   /**
    * Reference index entries (EC-155, vision AD-6) — derived data, recomputed
    * replace-all-for-source on every write. Indexed for efficient lookup in both

package/convex/triggers.ts

@@ -1,5 +1,6 @@
 import { unfoldDocument } from '@elytracms/core/cms-core'
 import type { CmsDocument } from '@elytracms/core/cms-core'
+import { redirectRecordKind } from '@elytracms/core/persistence'
 import { Triggers } from 'convex-helpers/server/triggers'
 import type { DataModel } from './functions'
 import { maintainDocumentReferences, removeDocumentReferences } from './referenceMaintenance'
@@ -33,7 +34,8 @@ import { scheduleRevalidate } from './revalidate'
  *
  * - `cmsDocuments` — only when the live pin (`publishedVersion`) moves
  *   (`publish` / `unpublish`), or a pinned row is deleted (`delete`);
- * - `redirects` (EC-510) — every write (`redirects`; the row IS the live state);
+ * - `records` of the redirect kind (EC-616; EC-510 before it on the `redirects` table) —
+ *   every write (`redirects`; the row IS the live state); no other record kind;
  * - `assets` (EC-579) — every edit and delete (`asset`); a create fires nothing.
  *
  * The snapshot reads one more table, `documentVersions`, but only the version a
@@ -129,6 +131,24 @@ triggers.register('redirects', async (ctx) => {
   await scheduleRevalidate(ctx, { kind: 'redirects' })
 })
 
+/**
+ * The generic record store (EC-616). Of all record kinds, ONLY the engine's redirect
+ * kind is projected onto the live wire (`delivery.ts` reads it through
+ * `loadRedirectEntries`), so only a write to a `redirect` row revalidates — with exactly
+ * the event the legacy `redirects` table fired above (EC-510: every write, the receiver
+ * answers with the sweep). Every other kind — an addon's submissions, analytics rows —
+ * is never on the wire and fires nothing; a kind that starts reaching the snapshot
+ * belongs in this check.
+ *
+ * Since the move, a redirect write is a `records` write; the legacy table's trigger
+ * above still fires for the transitional deletes (a save lifting a legacy-only redirect
+ * deletes its legacy row: two sweeps for that one save, until the migration ran).
+ */
+triggers.register('records', async (ctx, change) => {
+  const kind = (change.newDoc ?? change.oldDoc)?.kind
+  if (kind === redirectRecordKind.kind) await scheduleRevalidate(ctx, { kind: 'redirects' })
+})
+
 /**
  * Asset records (EC-579). The delivery snapshot projects every asset row onto
  * the live wire field by field (url, dimensions, alt, focal point, lqip, the

package/dist/addon.d.ts

@@ -0,0 +1,71 @@
+/**
+ * `@elytracms/studio/addon` — THE public addon API (EC-616, ruling EC-565 § 6b item 2).
+ *
+ * An addon (`@elytracms/forms`, `@elytracms/analytics`, or your own) is an optional
+ * package whose studio half contributes navigation items to a project's
+ * `defineStudio({ sidebar })` — a rail bound to a record kind, or a view with its own
+ * component — and whose backend half is a record kind in the generic record store
+ * (`defineRecordKind` / `adapter.records(kind)` in `@elytracms/core/persistence`, its
+ * Convex functions from `defineRecordFunctions` in `@elytracms/studio/convex/
+ * record-functions`). Everything an addon's studio code touches is exported HERE; the
+ * studio's internals (`lib/*`, `components/*`) are not part of the published package.
+ * `@elytracms/studio/ui` stays the primitive set (Button, Panel, Text, …).
+ *
+ * ## The chrome contract
+ *
+ * The SHELL draws the top bar, the breadcrumb (its section crumb is the view's `label`;
+ * deeper crumbs are contributed with {@link useSetBreadcrumb}), the rail with its issues
+ * foot (findings contributed with {@link useNavIssues}, or always-on through a view's
+ * `useIssues`), the banners and the theme. A VIEW owns the whole scrollable content area
+ * under it — including its own title header: the shell adds no frame, title or padding.
+ * A view reaches the studio through its {@link AppViewContext}: the project, its deep
+ * link and search, the operations client (every read and write goes through the one
+ * authorized chokepoint), the query hooks over the one cache, the content locale, and
+ * the signed-in user with their role.
+ *
+ * ## The two navigation items
+ *
+ * ```tsx
+ * import { nav } from '@elytracms/studio/addon'
+ * import { submissionRecordKind } from './kinds'
+ *
+ * // a rail bound to a record kind — the portable list/edit surfaces, no component to write
+ * nav.rail(submissionRecordKind, { label: 'Submissions' })
+ * // a custom component — the whole content area is yours
+ * nav.view({ id: 'forms-stats', label: 'Form stats', render: (ctx) => <Stats ctx={ctx} /> })
+ * ```
+ */
+export { nav } from './components/app-views/default-modules.js';
+export type { CustomViewConfig, RailViewConfig, BuiltinViewConfig, } from './components/app-views/default-modules.js';
+export type { AppViewContext, AppViewDeepLink, AppViewModule, AppViewQueryHooks, NavIssuesHook, NavPermission, NavPermissionContext, SidebarNode, SidebarViewNode, } from './components/app-views/module.js';
+/** A record rail's pieces, for an addon composing its own view around one. */
+export { RECORD_RAIL_CAPABILITIES, RecordRailModule, RecordRailProvider, useRecordCollectionViewSource, useRecordList, useRecordRail, } from './components/records/record-rail.js';
+export type { RecordRailModuleProps, RecordRailPaths, RecordRailStore } from './components/records/record-rail.js';
+export { lensDocumentToRecordWrite, recordLensDef, recordToLensDocument } from './components/records/record-lens.js';
+/** The portable list/edit surfaces over any source, and the scaffold that assembles one. */
+export { CollectionViewSurface } from './components/collection-view/collection-view-surface.js';
+export { assembleRailViewSource, metaBagProjection, normalizeOkResult, useRailViewSource, } from './components/rail-view-source.js';
+export type { OkResult, RailAdapter } from './components/rail-view-source.js';
+export type { CollectionViewCapabilities, CollectionViewSource, FieldAccess, } from './lib/collection-view/collection-view-source.js';
+export { useOperationCache, useOperationQuery } from './lib/query/index.js';
+export type { OperationCache, UseOperationQueryOptions } from './lib/query/index.js';
+export { useStudioLocale } from './lib/locale/index.js';
+export type { StudioLocale } from './lib/locale/index.js';
+export { useSetBreadcrumb } from './components/breadcrumb-context.js';
+export type { BreadcrumbItem } from './components/breadcrumb-context.js';
+export { useNavIssues } from './components/nav-issues-registry.js';
+export type { NavIssue } from './components/nav-issues-registry.js';
+/** A pane in the document editor's inspector — `defineStudio({ documentPanes: [documentPane({ … })] })`. */
+export { documentPane } from './components/inspector/document-panes.js';
+export type { DocumentPane, DocumentPaneContext } from './components/inspector/document-panes.js';
+/**
+ * The portable edit shell alone (AD-19), with its form-column appendix seam (EC-396): an addon
+ * that assembles its own source (`useRailViewSource`) renders one record's detail with
+ * read-only sections below the editable fields — the forms inbox shows a submission's answers,
+ * files and delivery log there.
+ */
+export { PortableDetailEditor } from './components/cms/detail-editor.js';
+/** The one query key of a kind's records in a project — patch it after a write (`useOperationCache`). */
+export { recordListKey } from './components/records/record-rail.js';
+/** Resolve a `LocalizedString` (`'Text'` or `{ en, de, … }`) in the studio's UI language. */
+export { useLabel } from './lib/i18n/index.js';

package/dist/addon.js

@@ -0,0 +1,67 @@
+/**
+ * `@elytracms/studio/addon` — THE public addon API (EC-616, ruling EC-565 § 6b item 2).
+ *
+ * An addon (`@elytracms/forms`, `@elytracms/analytics`, or your own) is an optional
+ * package whose studio half contributes navigation items to a project's
+ * `defineStudio({ sidebar })` — a rail bound to a record kind, or a view with its own
+ * component — and whose backend half is a record kind in the generic record store
+ * (`defineRecordKind` / `adapter.records(kind)` in `@elytracms/core/persistence`, its
+ * Convex functions from `defineRecordFunctions` in `@elytracms/studio/convex/
+ * record-functions`). Everything an addon's studio code touches is exported HERE; the
+ * studio's internals (`lib/*`, `components/*`) are not part of the published package.
+ * `@elytracms/studio/ui` stays the primitive set (Button, Panel, Text, …).
+ *
+ * ## The chrome contract
+ *
+ * The SHELL draws the top bar, the breadcrumb (its section crumb is the view's `label`;
+ * deeper crumbs are contributed with {@link useSetBreadcrumb}), the rail with its issues
+ * foot (findings contributed with {@link useNavIssues}, or always-on through a view's
+ * `useIssues`), the banners and the theme. A VIEW owns the whole scrollable content area
+ * under it — including its own title header: the shell adds no frame, title or padding.
+ * A view reaches the studio through its {@link AppViewContext}: the project, its deep
+ * link and search, the operations client (every read and write goes through the one
+ * authorized chokepoint), the query hooks over the one cache, the content locale, and
+ * the signed-in user with their role.
+ *
+ * ## The two navigation items
+ *
+ * ```tsx
+ * import { nav } from '@elytracms/studio/addon'
+ * import { submissionRecordKind } from './kinds'
+ *
+ * // a rail bound to a record kind — the portable list/edit surfaces, no component to write
+ * nav.rail(submissionRecordKind, { label: 'Submissions' })
+ * // a custom component — the whole content area is yours
+ * nav.view({ id: 'forms-stats', label: 'Form stats', render: (ctx) => <Stats ctx={ctx} /> })
+ * ```
+ */
+// --- Navigation items and the view contract --------------------------------------------
+export { nav } from './components/app-views/default-modules.js';
+// --- Rails: a record kind, or your own source -------------------------------------------
+/** A record rail's pieces, for an addon composing its own view around one. */
+export { RECORD_RAIL_CAPABILITIES, RecordRailModule, RecordRailProvider, useRecordCollectionViewSource, useRecordList, useRecordRail, } from './components/records/record-rail.js';
+export { lensDocumentToRecordWrite, recordLensDef, recordToLensDocument } from './components/records/record-lens.js';
+/** The portable list/edit surfaces over any source, and the scaffold that assembles one. */
+export { CollectionViewSurface } from './components/collection-view/collection-view-surface.js';
+export { assembleRailViewSource, metaBagProjection, normalizeOkResult, useRailViewSource, } from './components/rail-view-source.js';
+// --- Hooks: the cache, the locale, the breadcrumb, the rail foot -------------------------
+export { useOperationCache, useOperationQuery } from './lib/query/index.js';
+export { useStudioLocale } from './lib/locale/index.js';
+export { useSetBreadcrumb } from './components/breadcrumb-context.js';
+export { useNavIssues } from './components/nav-issues-registry.js';
+// --- The document editor: contributed inspector panes (EC-618) ---------------------------
+/** A pane in the document editor's inspector — `defineStudio({ documentPanes: [documentPane({ … })] })`. */
+export { documentPane } from './components/inspector/document-panes.js';
+// --- EC-613 (the forms addon): an own source's edit shell, its list key, the UI language -----
+/**
+ * The portable edit shell alone (AD-19), with its form-column appendix seam (EC-396): an addon
+ * that assembles its own source (`useRailViewSource`) renders one record's detail with
+ * read-only sections below the editable fields — the forms inbox shows a submission's answers,
+ * files and delivery log there.
+ */
+export { PortableDetailEditor } from './components/cms/detail-editor.js';
+/** The one query key of a kind's records in a project — patch it after a write (`useOperationCache`). */
+export { recordListKey } from './components/records/record-rail.js';
+/** Resolve a `LocalizedString` (`'Text'` or `{ en, de, … }`) in the studio's UI language. */
+export { useLabel } from './lib/i18n/index.js';
+//# sourceMappingURL=addon.js.map

package/dist/addon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"addon.js","sourceRoot":"","sources":["../src/addon.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,0FAA0F;AAE1F,OAAO,EAAE,GAAG,EAAE,MAAM,wCAAwC,CAAA;AAkB5D,2FAA2F;AAE3F,8EAA8E;AAC9E,OAAO,EACL,wBAAwB,EACxB,gBAAgB,EAChB,kBAAkB,EAClB,6BAA6B,EAC7B,aAAa,EACb,aAAa,GACd,MAAM,kCAAkC,CAAA;AAEzC,OAAO,EAAE,yBAAyB,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAA;AAEjH,4FAA4F;AAC5F,OAAO,EAAE,qBAAqB,EAAE,MAAM,sDAAsD,CAAA;AAC5F,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,+BAA+B,CAAA;AAQtC,4FAA4F;AAE5F,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAElE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAE9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAElE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAA;AAG/D,4FAA4F;AAE5F,4GAA4G;AAC5G,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAA;AAGpE,gGAAgG;AAEhG;;;;;GAKG;AACH,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAA;AACrE,yGAAyG;AACzG,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAA;AAChE,6FAA6F;AAC7F,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA","sourcesContent":["/**\n * `@elytracms/studio/addon` — THE public addon API (EC-616, ruling EC-565 § 6b item 2).\n *\n * An addon (`@elytracms/forms`, `@elytracms/analytics`, or your own) is an optional\n * package whose studio half contributes navigation items to a project's\n * `defineStudio({ sidebar })` — a rail bound to a record kind, or a view with its own\n * component — and whose backend half is a record kind in the generic record store\n * (`defineRecordKind` / `adapter.records(kind)` in `@elytracms/core/persistence`, its\n * Convex functions from `defineRecordFunctions` in `@elytracms/studio/convex/\n * record-functions`). Everything an addon's studio code touches is exported HERE; the\n * studio's internals (`lib/*`, `components/*`) are not part of the published package.\n * `@elytracms/studio/ui` stays the primitive set (Button, Panel, Text, …).\n *\n * ## The chrome contract\n *\n * The SHELL draws the top bar, the breadcrumb (its section crumb is the view's `label`;\n * deeper crumbs are contributed with {@link useSetBreadcrumb}), the rail with its issues\n * foot (findings contributed with {@link useNavIssues}, or always-on through a view's\n * `useIssues`), the banners and the theme. A VIEW owns the whole scrollable content area\n * under it — including its own title header: the shell adds no frame, title or padding.\n * A view reaches the studio through its {@link AppViewContext}: the project, its deep\n * link and search, the operations client (every read and write goes through the one\n * authorized chokepoint), the query hooks over the one cache, the content locale, and\n * the signed-in user with their role.\n *\n * ## The two navigation items\n *\n * ```tsx\n * import { nav } from '@elytracms/studio/addon'\n * import { submissionRecordKind } from './kinds'\n *\n * // a rail bound to a record kind — the portable list/edit surfaces, no component to write\n * nav.rail(submissionRecordKind, { label: 'Submissions' })\n * // a custom component — the whole content area is yours\n * nav.view({ id: 'forms-stats', label: 'Form stats', render: (ctx) => <Stats ctx={ctx} /> })\n * ```\n */\n\n// --- Navigation items and the view contract --------------------------------------------\n\nexport { nav } from './components/app-views/default-modules'\nexport type {\n  CustomViewConfig,\n  RailViewConfig,\n  BuiltinViewConfig,\n} from './components/app-views/default-modules'\nexport type {\n  AppViewContext,\n  AppViewDeepLink,\n  AppViewModule,\n  AppViewQueryHooks,\n  NavIssuesHook,\n  NavPermission,\n  NavPermissionContext,\n  SidebarNode,\n  SidebarViewNode,\n} from './components/app-views/module'\n\n// --- Rails: a record kind, or your own source -------------------------------------------\n\n/** A record rail's pieces, for an addon composing its own view around one. */\nexport {\n  RECORD_RAIL_CAPABILITIES,\n  RecordRailModule,\n  RecordRailProvider,\n  useRecordCollectionViewSource,\n  useRecordList,\n  useRecordRail,\n} from './components/records/record-rail'\nexport type { RecordRailModuleProps, RecordRailPaths, RecordRailStore } from './components/records/record-rail'\nexport { lensDocumentToRecordWrite, recordLensDef, recordToLensDocument } from './components/records/record-lens'\n\n/** The portable list/edit surfaces over any source, and the scaffold that assembles one. */\nexport { CollectionViewSurface } from './components/collection-view/collection-view-surface'\nexport {\n  assembleRailViewSource,\n  metaBagProjection,\n  normalizeOkResult,\n  useRailViewSource,\n} from './components/rail-view-source'\nexport type { OkResult, RailAdapter } from './components/rail-view-source'\nexport type {\n  CollectionViewCapabilities,\n  CollectionViewSource,\n  FieldAccess,\n} from './lib/collection-view/collection-view-source'\n\n// --- Hooks: the cache, the locale, the breadcrumb, the rail foot -------------------------\n\nexport { useOperationCache, useOperationQuery } from './lib/query'\nexport type { OperationCache, UseOperationQueryOptions } from './lib/query'\nexport { useStudioLocale } from './lib/locale'\nexport type { StudioLocale } from './lib/locale'\nexport { useSetBreadcrumb } from './components/breadcrumb-context'\nexport type { BreadcrumbItem } from './components/breadcrumb-context'\nexport { useNavIssues } from './components/nav-issues-registry'\nexport type { NavIssue } from './components/nav-issues-registry'\n\n// --- The document editor: contributed inspector panes (EC-618) ---------------------------\n\n/** A pane in the document editor's inspector — `defineStudio({ documentPanes: [documentPane({ … })] })`. */\nexport { documentPane } from './components/inspector/document-panes'\nexport type { DocumentPane, DocumentPaneContext } from './components/inspector/document-panes'\n\n// --- EC-613 (the forms addon): an own source's edit shell, its list key, the UI language -----\n\n/**\n * The portable edit shell alone (AD-19), with its form-column appendix seam (EC-396): an addon\n * that assembles its own source (`useRailViewSource`) renders one record's detail with\n * read-only sections below the editable fields — the forms inbox shows a submission's answers,\n * files and delivery log there.\n */\nexport { PortableDetailEditor } from './components/cms/detail-editor'\n/** The one query key of a kind's records in a project — patch it after a write (`useOperationCache`). */\nexport { recordListKey } from './components/records/record-rail'\n/** Resolve a `LocalizedString` (`'Text'` or `{ en, de, … }`) in the studio's UI language. */\nexport { useLabel } from './lib/i18n'\n"]}

package/dist/components/account/account-settings.js

@@ -1,8 +1,8 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { UserCog } from 'lucide-react';
 import { Heading, Stack, Text } from '@elytracms/studio/ui';
-import { listStoreState, useOperationQuery } from '@elytracms/studio/lib/query';
-import { translate } from '@elytracms/studio/lib/i18n';
+import { listStoreState, useOperationQuery } from '../../lib/query/index.js';
+import { translate } from '../../lib/i18n/index.js';
 import { useAuth } from '../auth-context.js';
 import { PortableDetailEditor } from '../cms/detail-editor.js';
 import { CredentialPanel } from './credential-panel.js';

package/dist/components/account/account-settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"account-settings.js","sourceRoot":"","sources":["../../../src/components/account/account-settings.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAC/E,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAA;AAErE;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,EAAE,SAAS,EAAyB;IAClE,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;IACtB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,IAAI,CAAA;IAE7C,MAAM,KAAK,GAAG,iBAAiB,CAAoB;QACjD,QAAQ,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,IAAI,GAAG,CAAC;QAC/C,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YAC3B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;YAC5D,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACrD,OAAO,MAAM,CAAC,KAAK,IAAI,IAAI,CAAA;QAC7B,CAAC;QACD,OAAO,EAAE,MAAM,KAAK,IAAI;KACzB,CAAC,CAAA;IACF,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IACtD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,CAAA;IAE/B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,KAAC,YAAY,cAAE,SAAS,CAAC,iBAAiB,CAAC,GAAgB,CAAA;IACpE,CAAC;IACD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,CACL,KAAC,YAAY,IAAC,MAAM,EAAC,eAAe,YACjC,YAAY,IAAI,SAAS,CAAC,oBAAoB,CAAC,GACnC,CAChB,CAAA;IACH,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,+EAA+E;QAC/E,OAAO,CACL,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,EAAC,KAAK,EAAC,QAAQ,EAAC,OAAO,EAAC,QAAQ,EAAC,SAAS,EAAC,wBAAwB,aAC/E,KAAC,OAAO,IAAC,SAAS,EAAC,8BAA8B,GAAG,EACpD,KAAC,OAAO,IAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAC,IAAI,YACzB,SAAS,CAAC,wBAAwB,CAAC,GAC5B,EACV,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,UAAU,YAC9C,SAAS,CAAC,uBAAuB,CAAC,GAC9B,IACD,CACT,CAAA;IACH,CAAC;IAED,OAAO,KAAC,aAAa,IAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,GAAI,CAAA;AAC/G,CAAC;AAED,SAAS,aAAa,CAAC,EACrB,SAAS,EACT,IAAI,EACJ,OAAO,GAKR;IACC,MAAM,MAAM,GAAG,wBAAwB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;IACrE,kFAAkF;IAClF,mFAAmF;IACnF,kFAAkF;IAClF,iFAAiF;IACjF,8EAA8E;IAC9E,OAAO,CACL,KAAC,oBAAoB,IACnB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,SAAS,EACpB,UAAU,EAAE,IAAI,CAAC,EAAE,EACnB,YAAY,EAAE,KAAC,eAAe,KAAG,GACjC,CACH,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAkD;IACxF,OAAO,CACL,KAAC,KAAK,IAAC,SAAS,EAAC,+BAA+B,EAAC,KAAK,EAAC,QAAQ,EAAC,OAAO,EAAC,QAAQ,YAC9E,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,YACvE,QAAQ,GACJ,GACD,CACT,CAAA;AACH,CAAC","sourcesContent":["import { UserCog } from 'lucide-react'\nimport type { UserRecord } from '@elytracms/core/persistence'\nimport { Heading, Stack, Text } from '@elytracms/studio/ui'\nimport { listStoreState, useOperationQuery } from '@elytracms/studio/lib/query'\nimport { translate } from '@elytracms/studio/lib/i18n'\nimport { useAuth } from '../auth-context'\nimport { PortableDetailEditor } from '../cms/detail-editor'\nimport { CredentialPanel } from './credential-panel'\nimport { useSelfAccountViewSource } from './self-account-view-source'\n\n/**\n * The **account-settings** surface (EC-240 H-tail items 1–4). A member — admin or\n * not — opens their OWN record here (via the user menu → `users/<selfId>`). It is\n * self-permitted: the self record is read through `users.getSelf` (never the\n * admin-only `users.list`/`get`), so a non-admin reaches ONLY their own account.\n *\n * Reuses the portable edit shell (AD-19) for the identity form (name/avatar\n * editable → `updateProfile`; email/role read-only) and appends the credential\n * seam (change password). No bespoke form — the shell + the self source carry it.\n */\nexport function AccountSettings({ projectId }: { projectId: string }) {\n  const auth = useAuth()\n  const userId = auth.session?.user?.id ?? null\n\n  const query = useOperationQuery<UserRecord | null>({\n    queryKey: ['account', projectId, userId ?? '∅'],\n    loader: async (operations) => {\n      const result = await operations.users.getSelf({ projectId })\n      if (!result.ok) throw new Error(result.error.message)\n      return result.value ?? null\n    },\n    enabled: userId !== null,\n  })\n  const { status, errorMessage } = listStoreState(query)\n  const self = query.data ?? null\n\n  if (status === 'loading') {\n    return <CenteredNote>{translate('account.loading')}</CenteredNote>\n  }\n  if (status === 'error') {\n    return (\n      <CenteredNote testId=\"account-error\">\n        {errorMessage ?? translate('account.loadFailed')}\n      </CenteredNote>\n    )\n  }\n  if (!self) {\n    // Authenticated but not a member (no role yet) — honest, not a raw auth error.\n    return (\n      <Stack gap=\"2\" align=\"center\" justify=\"center\" className=\"h-full p-8 text-center\">\n        <UserCog className=\"size-6 text-muted-foreground\" />\n        <Heading level={2} size=\"h3\">\n          {translate('account.notMemberTitle')}\n        </Heading>\n        <Text size=\"sm\" tone=\"muted\" className=\"max-w-sm\">\n          {translate('account.notMemberBody')}\n        </Text>\n      </Stack>\n    )\n  }\n\n  return <LoadedAccount projectId={projectId} self={self} refresh={async () => void (await query.refetch())} />\n}\n\nfunction LoadedAccount({\n  projectId,\n  self,\n  refresh,\n}: {\n  projectId: string\n  self: UserRecord\n  refresh: () => Promise<void>\n}) {\n  const source = useSelfAccountViewSource({ projectId, self, refresh })\n  // EC-396: ONE editor surface. The identity form renders through the portable edit\n  // shell (name/avatar editable), and the credential seam mounts through the shell's\n  // form-column appendix — so the CredentialPanel sits IN the form column (aligned,\n  // same width as the fieldset cards) and the shell owns the scroll + full height,\n  // making the Issues sidebar span the whole surface. No parallel card wrapper.\n  return (\n    <PortableDetailEditor\n      source={source}\n      projectId={projectId}\n      documentId={self.id}\n      formAppendix={<CredentialPanel />}\n    />\n  )\n}\n\nfunction CenteredNote({ children, testId }: { children: React.ReactNode; testId?: string }) {\n  return (\n    <Stack className=\"h-full place-items-center p-8\" align=\"center\" justify=\"center\">\n      <Text size=\"sm\" tone=\"muted\" {...(testId ? { 'data-testid': testId } : {})}>\n        {children}\n      </Text>\n    </Stack>\n  )\n}\n"]}
+{"version":3,"file":"account-settings.js","sourceRoot":"","sources":["../../../src/components/account/account-settings.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAA;AAErE;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,EAAE,SAAS,EAAyB;IAClE,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;IACtB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,IAAI,CAAA;IAE7C,MAAM,KAAK,GAAG,iBAAiB,CAAoB;QACjD,QAAQ,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,IAAI,GAAG,CAAC;QAC/C,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YAC3B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;YAC5D,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACrD,OAAO,MAAM,CAAC,KAAK,IAAI,IAAI,CAAA;QAC7B,CAAC;QACD,OAAO,EAAE,MAAM,KAAK,IAAI;KACzB,CAAC,CAAA;IACF,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IACtD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,CAAA;IAE/B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,KAAC,YAAY,cAAE,SAAS,CAAC,iBAAiB,CAAC,GAAgB,CAAA;IACpE,CAAC;IACD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,CACL,KAAC,YAAY,IAAC,MAAM,EAAC,eAAe,YACjC,YAAY,IAAI,SAAS,CAAC,oBAAoB,CAAC,GACnC,CAChB,CAAA;IACH,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,+EAA+E;QAC/E,OAAO,CACL,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,EAAC,KAAK,EAAC,QAAQ,EAAC,OAAO,EAAC,QAAQ,EAAC,SAAS,EAAC,wBAAwB,aAC/E,KAAC,OAAO,IAAC,SAAS,EAAC,8BAA8B,GAAG,EACpD,KAAC,OAAO,IAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAC,IAAI,YACzB,SAAS,CAAC,wBAAwB,CAAC,GAC5B,EACV,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,UAAU,YAC9C,SAAS,CAAC,uBAAuB,CAAC,GAC9B,IACD,CACT,CAAA;IACH,CAAC;IAED,OAAO,KAAC,aAAa,IAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,GAAI,CAAA;AAC/G,CAAC;AAED,SAAS,aAAa,CAAC,EACrB,SAAS,EACT,IAAI,EACJ,OAAO,GAKR;IACC,MAAM,MAAM,GAAG,wBAAwB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;IACrE,kFAAkF;IAClF,mFAAmF;IACnF,kFAAkF;IAClF,iFAAiF;IACjF,8EAA8E;IAC9E,OAAO,CACL,KAAC,oBAAoB,IACnB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,SAAS,EACpB,UAAU,EAAE,IAAI,CAAC,EAAE,EACnB,YAAY,EAAE,KAAC,eAAe,KAAG,GACjC,CACH,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAkD;IACxF,OAAO,CACL,KAAC,KAAK,IAAC,SAAS,EAAC,+BAA+B,EAAC,KAAK,EAAC,QAAQ,EAAC,OAAO,EAAC,QAAQ,YAC9E,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,YACvE,QAAQ,GACJ,GACD,CACT,CAAA;AACH,CAAC","sourcesContent":["import { UserCog } from 'lucide-react'\nimport type { UserRecord } from '@elytracms/core/persistence'\nimport { Heading, Stack, Text } from '@elytracms/studio/ui'\nimport { listStoreState, useOperationQuery } from '../../lib/query'\nimport { translate } from '../../lib/i18n'\nimport { useAuth } from '../auth-context'\nimport { PortableDetailEditor } from '../cms/detail-editor'\nimport { CredentialPanel } from './credential-panel'\nimport { useSelfAccountViewSource } from './self-account-view-source'\n\n/**\n * The **account-settings** surface (EC-240 H-tail items 1–4). A member — admin or\n * not — opens their OWN record here (via the user menu → `users/<selfId>`). It is\n * self-permitted: the self record is read through `users.getSelf` (never the\n * admin-only `users.list`/`get`), so a non-admin reaches ONLY their own account.\n *\n * Reuses the portable edit shell (AD-19) for the identity form (name/avatar\n * editable → `updateProfile`; email/role read-only) and appends the credential\n * seam (change password). No bespoke form — the shell + the self source carry it.\n */\nexport function AccountSettings({ projectId }: { projectId: string }) {\n  const auth = useAuth()\n  const userId = auth.session?.user?.id ?? null\n\n  const query = useOperationQuery<UserRecord | null>({\n    queryKey: ['account', projectId, userId ?? '∅'],\n    loader: async (operations) => {\n      const result = await operations.users.getSelf({ projectId })\n      if (!result.ok) throw new Error(result.error.message)\n      return result.value ?? null\n    },\n    enabled: userId !== null,\n  })\n  const { status, errorMessage } = listStoreState(query)\n  const self = query.data ?? null\n\n  if (status === 'loading') {\n    return <CenteredNote>{translate('account.loading')}</CenteredNote>\n  }\n  if (status === 'error') {\n    return (\n      <CenteredNote testId=\"account-error\">\n        {errorMessage ?? translate('account.loadFailed')}\n      </CenteredNote>\n    )\n  }\n  if (!self) {\n    // Authenticated but not a member (no role yet) — honest, not a raw auth error.\n    return (\n      <Stack gap=\"2\" align=\"center\" justify=\"center\" className=\"h-full p-8 text-center\">\n        <UserCog className=\"size-6 text-muted-foreground\" />\n        <Heading level={2} size=\"h3\">\n          {translate('account.notMemberTitle')}\n        </Heading>\n        <Text size=\"sm\" tone=\"muted\" className=\"max-w-sm\">\n          {translate('account.notMemberBody')}\n        </Text>\n      </Stack>\n    )\n  }\n\n  return <LoadedAccount projectId={projectId} self={self} refresh={async () => void (await query.refetch())} />\n}\n\nfunction LoadedAccount({\n  projectId,\n  self,\n  refresh,\n}: {\n  projectId: string\n  self: UserRecord\n  refresh: () => Promise<void>\n}) {\n  const source = useSelfAccountViewSource({ projectId, self, refresh })\n  // EC-396: ONE editor surface. The identity form renders through the portable edit\n  // shell (name/avatar editable), and the credential seam mounts through the shell's\n  // form-column appendix — so the CredentialPanel sits IN the form column (aligned,\n  // same width as the fieldset cards) and the shell owns the scroll + full height,\n  // making the Issues sidebar span the whole surface. No parallel card wrapper.\n  return (\n    <PortableDetailEditor\n      source={source}\n      projectId={projectId}\n      documentId={self.id}\n      formAppendix={<CredentialPanel />}\n    />\n  )\n}\n\nfunction CenteredNote({ children, testId }: { children: React.ReactNode; testId?: string }) {\n  return (\n    <Stack className=\"h-full place-items-center p-8\" align=\"center\" justify=\"center\">\n      <Text size=\"sm\" tone=\"muted\" {...(testId ? { 'data-testid': testId } : {})}>\n        {children}\n      </Text>\n    </Stack>\n  )\n}\n"]}

package/dist/components/account/credential-panel.js

@@ -2,8 +2,8 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useState } from 'react';
 import { KeyRound, ShieldCheck } from 'lucide-react';
 import { Button, Card, CardContent, Field, Heading, Input, Row, Stack, Text, toast, } from '@elytracms/studio/ui';
-import { translate } from '@elytracms/studio/lib/i18n';
-import { changePasswordErrorMessageKey } from '@elytracms/studio/lib/auth-errors';
+import { translate } from '../../lib/i18n/index.js';
+import { changePasswordErrorMessageKey } from '../../lib/auth-errors.js';
 import { useAuth } from '../auth-context.js';
 /**
  * The credential seam (EC-240 H-tail item 3) — part of the account **property

package/dist/components/account/credential-panel.js.map

@@ -1 +1 @@
-{"version":3,"file":"credential-panel.js","sourceRoot":"","sources":["../../../src/components/account/credential-panel.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAEhC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AACpD,OAAO,EACL,MAAM,EACN,IAAI,EACJ,WAAW,EACX,KAAK,EACL,OAAO,EACP,KAAK,EACL,GAAG,EACH,KAAK,EACL,IAAI,EACJ,KAAK,GACN,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AACtD,OAAO,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAA;AACjF,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAEzC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;IACtB,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC1C,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IACpC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC1C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAwB,MAAM,CAAC,CAAA;IACjE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAA;IAEvD,KAAK,UAAU,YAAY,CAAC,KAAiC;QAC3D,KAAK,CAAC,cAAc,EAAE,CAAA;QACtB,QAAQ,CAAC,IAAI,CAAC,CAAA;QACd,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,QAAQ,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC,CAAA;YAChD,OAAM;QACR,CAAC;QACD,QAAQ,CAAC,YAAY,CAAC,CAAA;QACtB,2EAA2E;QAC3E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;QACzF,QAAQ,CAAC,MAAM,CAAC,CAAA;QAChB,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,UAAU,CAAC,EAAE,CAAC,CAAA;YACd,OAAO,CAAC,EAAE,CAAC,CAAA;YACX,UAAU,CAAC,EAAE,CAAC,CAAA;YACd,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC,CAAA;YACpD,OAAM;QACR,CAAC;QACD,2EAA2E;QAC3E,uEAAuE;QACvE,wEAAwE;QACxE,MAAM,QAAQ,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAA;QACtD,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC3D,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,KAAK,YAAY,CAAA;IAEzC,OAAO,CACL,KAAC,IAAI,mBAAa,kBAAkB,YAClC,KAAC,WAAW,IAAC,SAAS,EAAC,MAAM,YAC3B,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,aACZ,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,aACZ,MAAC,GAAG,IAAC,GAAG,EAAC,GAAG,EAAC,KAAK,EAAC,QAAQ,aACzB,KAAC,WAAW,IAAC,SAAS,EAAC,8BAA8B,GAAG,EACxD,KAAC,OAAO,IAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAC,IAAI,YACzB,SAAS,CAAC,wBAAwB,CAAC,GAC5B,IACN,EACN,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,YACzB,SAAS,CAAC,yBAAyB,CAAC,GAChC,IACD,EAER,eAAM,QAAQ,EAAE,YAAY,EAAE,UAAU,kBACtC,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,aACZ,KAAC,KAAK,IACJ,KAAK,EAAE,SAAS,CAAC,0BAA0B,CAAC,EAC5C,OAAO,EAAC,0BAA0B,EAClC,QAAQ,kBAER,KAAC,KAAK,IACJ,EAAE,EAAC,0BAA0B,EAC7B,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,kBAAkB,EAC/B,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAC3C,QAAQ,EAAE,UAAU,GACpB,GACI,EACR,KAAC,KAAK,IACJ,KAAK,EAAE,SAAS,CAAC,sBAAsB,CAAC,EACxC,OAAO,EAAC,sBAAsB,EAC9B,QAAQ,kBAER,KAAC,KAAK,IACJ,EAAE,EAAC,sBAAsB,EACzB,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,cAAc,EAC3B,KAAK,EAAE,IAAI,EACX,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACxC,QAAQ,EAAE,UAAU,GACpB,GACI,EACR,KAAC,KAAK,IACJ,KAAK,EAAE,SAAS,CAAC,0BAA0B,CAAC,EAC5C,OAAO,EAAC,0BAA0B,EAClC,QAAQ,QACR,KAAK,EAAE,KAAK,YAEZ,KAAC,KAAK,IACJ,EAAE,EAAC,0BAA0B,EAC7B,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,cAAc,EAC3B,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAC3C,QAAQ,EAAE,UAAU,GACpB,GACI,EACR,KAAC,GAAG,cACF,MAAC,MAAM,IACL,IAAI,EAAC,QAAQ,EACb,OAAO,EAAC,SAAS,EACjB,QAAQ,EAAE,UAAU,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,aAErD,KAAC,QAAQ,KAAG,EACX,UAAU;gDACT,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC;gDACxC,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,IACjC,GACL,IACA,GACH,IACD,GACI,GACT,CACR,CAAA;AACH,CAAC","sourcesContent":["import { useState } from 'react'\nimport type { FormEvent } from 'react'\nimport { KeyRound, ShieldCheck } from 'lucide-react'\nimport {\n  Button,\n  Card,\n  CardContent,\n  Field,\n  Heading,\n  Input,\n  Row,\n  Stack,\n  Text,\n  toast,\n} from '@elytracms/studio/ui'\nimport { translate } from '@elytracms/studio/lib/i18n'\nimport { changePasswordErrorMessageKey } from '@elytracms/studio/lib/auth-errors'\nimport { useAuth } from '../auth-context'\n\n/**\n * The credential seam (EC-240 H-tail item 3) — part of the account **property\n * surface**, never a modal. Two blocks:\n *\n * - **Sign-in method** (read-only): today every studio account is email + password.\n *   OAuth \"connected accounts\" is a deferred extension.\n * - **Change password**: current + new + confirm, handed straight to\n *   `AuthAdapter.changePassword` (provider-delegated). SEAM ONLY — the raw values\n *   are never logged, stored, or inspected here; they leave in the adapter call.\n *\n * The current-password field is the gate around this sensitive action (no separate\n * confirm dialog needed).\n */\nexport function CredentialPanel() {\n  const auth = useAuth()\n  const [current, setCurrent] = useState('')\n  const [next, setNext] = useState('')\n  const [confirm, setConfirm] = useState('')\n  const [phase, setPhase] = useState<'idle' | 'submitting'>('idle')\n  const [error, setError] = useState<string | null>(null)\n\n  async function handleSubmit(event: FormEvent<HTMLFormElement>) {\n    event.preventDefault()\n    setError(null)\n    if (next !== confirm) {\n      setError(translate('account.password.mismatch'))\n      return\n    }\n    setPhase('submitting')\n    // The raw values leave here ONLY into the provider adapter — never logged.\n    const result = await auth.changePassword({ currentPassword: current, newPassword: next })\n    setPhase('idle')\n    if (result.ok) {\n      setCurrent('')\n      setNext('')\n      setConfirm('')\n      toast.success(translate('account.password.changed'))\n      return\n    }\n    // EC-412: engine-classified failures (the EC-377 reasons) localize through\n    // the message catalog; an unrecognized shape renders the adapter's raw\n    // English message — honest, never a stale mapping (the EC-397 pattern).\n    const errorKey = changePasswordErrorMessageKey(result)\n    setError(errorKey ? translate(errorKey) : result.message)\n  }\n\n  const submitting = phase === 'submitting'\n\n  return (\n    <Card data-testid=\"credential-panel\">\n      <CardContent className=\"pt-5\">\n        <Stack gap=\"4\">\n          <Stack gap=\"1\">\n            <Row gap=\"2\" align=\"center\">\n              <ShieldCheck className=\"size-4 text-muted-foreground\" />\n              <Heading level={3} size=\"h4\">\n                {translate('account.security.title')}\n              </Heading>\n            </Row>\n            <Text size=\"sm\" tone=\"muted\">\n              {translate('account.security.method')}\n            </Text>\n          </Stack>\n\n          <form onSubmit={handleSubmit} noValidate>\n            <Stack gap=\"3\">\n              <Field\n                label={translate('account.password.current')}\n                htmlFor=\"account-current-password\"\n                required\n              >\n                <Input\n                  id=\"account-current-password\"\n                  type=\"password\"\n                  autoComplete=\"current-password\"\n                  value={current}\n                  onChange={(e) => setCurrent(e.target.value)}\n                  disabled={submitting}\n                />\n              </Field>\n              <Field\n                label={translate('account.password.new')}\n                htmlFor=\"account-new-password\"\n                required\n              >\n                <Input\n                  id=\"account-new-password\"\n                  type=\"password\"\n                  autoComplete=\"new-password\"\n                  value={next}\n                  onChange={(e) => setNext(e.target.value)}\n                  disabled={submitting}\n                />\n              </Field>\n              <Field\n                label={translate('account.password.confirm')}\n                htmlFor=\"account-confirm-password\"\n                required\n                error={error}\n              >\n                <Input\n                  id=\"account-confirm-password\"\n                  type=\"password\"\n                  autoComplete=\"new-password\"\n                  value={confirm}\n                  onChange={(e) => setConfirm(e.target.value)}\n                  disabled={submitting}\n                />\n              </Field>\n              <Row>\n                <Button\n                  type=\"submit\"\n                  variant=\"outline\"\n                  disabled={submitting || !current || !next || !confirm}\n                >\n                  <KeyRound />\n                  {submitting\n                    ? translate('account.password.changing')\n                    : translate('account.password.change')}\n                </Button>\n              </Row>\n            </Stack>\n          </form>\n        </Stack>\n      </CardContent>\n    </Card>\n  )\n}\n"]}
+{"version":3,"file":"credential-panel.js","sourceRoot":"","sources":["../../../src/components/account/credential-panel.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAEhC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AACpD,OAAO,EACL,MAAM,EACN,IAAI,EACJ,WAAW,EACX,KAAK,EACL,OAAO,EACP,KAAK,EACL,GAAG,EACH,KAAK,EACL,IAAI,EACJ,KAAK,GACN,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAA;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAEzC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;IACtB,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC1C,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IACpC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC1C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAwB,MAAM,CAAC,CAAA;IACjE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAA;IAEvD,KAAK,UAAU,YAAY,CAAC,KAAiC;QAC3D,KAAK,CAAC,cAAc,EAAE,CAAA;QACtB,QAAQ,CAAC,IAAI,CAAC,CAAA;QACd,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,QAAQ,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC,CAAA;YAChD,OAAM;QACR,CAAC;QACD,QAAQ,CAAC,YAAY,CAAC,CAAA;QACtB,2EAA2E;QAC3E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;QACzF,QAAQ,CAAC,MAAM,CAAC,CAAA;QAChB,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,UAAU,CAAC,EAAE,CAAC,CAAA;YACd,OAAO,CAAC,EAAE,CAAC,CAAA;YACX,UAAU,CAAC,EAAE,CAAC,CAAA;YACd,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC,CAAA;YACpD,OAAM;QACR,CAAC;QACD,2EAA2E;QAC3E,uEAAuE;QACvE,wEAAwE;QACxE,MAAM,QAAQ,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAA;QACtD,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC3D,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,KAAK,YAAY,CAAA;IAEzC,OAAO,CACL,KAAC,IAAI,mBAAa,kBAAkB,YAClC,KAAC,WAAW,IAAC,SAAS,EAAC,MAAM,YAC3B,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,aACZ,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,aACZ,MAAC,GAAG,IAAC,GAAG,EAAC,GAAG,EAAC,KAAK,EAAC,QAAQ,aACzB,KAAC,WAAW,IAAC,SAAS,EAAC,8BAA8B,GAAG,EACxD,KAAC,OAAO,IAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAC,IAAI,YACzB,SAAS,CAAC,wBAAwB,CAAC,GAC5B,IACN,EACN,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,YACzB,SAAS,CAAC,yBAAyB,CAAC,GAChC,IACD,EAER,eAAM,QAAQ,EAAE,YAAY,EAAE,UAAU,kBACtC,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,aACZ,KAAC,KAAK,IACJ,KAAK,EAAE,SAAS,CAAC,0BAA0B,CAAC,EAC5C,OAAO,EAAC,0BAA0B,EAClC,QAAQ,kBAER,KAAC,KAAK,IACJ,EAAE,EAAC,0BAA0B,EAC7B,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,kBAAkB,EAC/B,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAC3C,QAAQ,EAAE,UAAU,GACpB,GACI,EACR,KAAC,KAAK,IACJ,KAAK,EAAE,SAAS,CAAC,sBAAsB,CAAC,EACxC,OAAO,EAAC,sBAAsB,EAC9B,QAAQ,kBAER,KAAC,KAAK,IACJ,EAAE,EAAC,sBAAsB,EACzB,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,cAAc,EAC3B,KAAK,EAAE,IAAI,EACX,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACxC,QAAQ,EAAE,UAAU,GACpB,GACI,EACR,KAAC,KAAK,IACJ,KAAK,EAAE,SAAS,CAAC,0BAA0B,CAAC,EAC5C,OAAO,EAAC,0BAA0B,EAClC,QAAQ,QACR,KAAK,EAAE,KAAK,YAEZ,KAAC,KAAK,IACJ,EAAE,EAAC,0BAA0B,EAC7B,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,cAAc,EAC3B,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAC3C,QAAQ,EAAE,UAAU,GACpB,GACI,EACR,KAAC,GAAG,cACF,MAAC,MAAM,IACL,IAAI,EAAC,QAAQ,EACb,OAAO,EAAC,SAAS,EACjB,QAAQ,EAAE,UAAU,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,aAErD,KAAC,QAAQ,KAAG,EACX,UAAU;gDACT,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC;gDACxC,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,IACjC,GACL,IACA,GACH,IACD,GACI,GACT,CACR,CAAA;AACH,CAAC","sourcesContent":["import { useState } from 'react'\nimport type { FormEvent } from 'react'\nimport { KeyRound, ShieldCheck } from 'lucide-react'\nimport {\n  Button,\n  Card,\n  CardContent,\n  Field,\n  Heading,\n  Input,\n  Row,\n  Stack,\n  Text,\n  toast,\n} from '@elytracms/studio/ui'\nimport { translate } from '../../lib/i18n'\nimport { changePasswordErrorMessageKey } from '../../lib/auth-errors'\nimport { useAuth } from '../auth-context'\n\n/**\n * The credential seam (EC-240 H-tail item 3) — part of the account **property\n * surface**, never a modal. Two blocks:\n *\n * - **Sign-in method** (read-only): today every studio account is email + password.\n *   OAuth \"connected accounts\" is a deferred extension.\n * - **Change password**: current + new + confirm, handed straight to\n *   `AuthAdapter.changePassword` (provider-delegated). SEAM ONLY — the raw values\n *   are never logged, stored, or inspected here; they leave in the adapter call.\n *\n * The current-password field is the gate around this sensitive action (no separate\n * confirm dialog needed).\n */\nexport function CredentialPanel() {\n  const auth = useAuth()\n  const [current, setCurrent] = useState('')\n  const [next, setNext] = useState('')\n  const [confirm, setConfirm] = useState('')\n  const [phase, setPhase] = useState<'idle' | 'submitting'>('idle')\n  const [error, setError] = useState<string | null>(null)\n\n  async function handleSubmit(event: FormEvent<HTMLFormElement>) {\n    event.preventDefault()\n    setError(null)\n    if (next !== confirm) {\n      setError(translate('account.password.mismatch'))\n      return\n    }\n    setPhase('submitting')\n    // The raw values leave here ONLY into the provider adapter — never logged.\n    const result = await auth.changePassword({ currentPassword: current, newPassword: next })\n    setPhase('idle')\n    if (result.ok) {\n      setCurrent('')\n      setNext('')\n      setConfirm('')\n      toast.success(translate('account.password.changed'))\n      return\n    }\n    // EC-412: engine-classified failures (the EC-377 reasons) localize through\n    // the message catalog; an unrecognized shape renders the adapter's raw\n    // English message — honest, never a stale mapping (the EC-397 pattern).\n    const errorKey = changePasswordErrorMessageKey(result)\n    setError(errorKey ? translate(errorKey) : result.message)\n  }\n\n  const submitting = phase === 'submitting'\n\n  return (\n    <Card data-testid=\"credential-panel\">\n      <CardContent className=\"pt-5\">\n        <Stack gap=\"4\">\n          <Stack gap=\"1\">\n            <Row gap=\"2\" align=\"center\">\n              <ShieldCheck className=\"size-4 text-muted-foreground\" />\n              <Heading level={3} size=\"h4\">\n                {translate('account.security.title')}\n              </Heading>\n            </Row>\n            <Text size=\"sm\" tone=\"muted\">\n              {translate('account.security.method')}\n            </Text>\n          </Stack>\n\n          <form onSubmit={handleSubmit} noValidate>\n            <Stack gap=\"3\">\n              <Field\n                label={translate('account.password.current')}\n                htmlFor=\"account-current-password\"\n                required\n              >\n                <Input\n                  id=\"account-current-password\"\n                  type=\"password\"\n                  autoComplete=\"current-password\"\n                  value={current}\n                  onChange={(e) => setCurrent(e.target.value)}\n                  disabled={submitting}\n                />\n              </Field>\n              <Field\n                label={translate('account.password.new')}\n                htmlFor=\"account-new-password\"\n                required\n              >\n                <Input\n                  id=\"account-new-password\"\n                  type=\"password\"\n                  autoComplete=\"new-password\"\n                  value={next}\n                  onChange={(e) => setNext(e.target.value)}\n                  disabled={submitting}\n                />\n              </Field>\n              <Field\n                label={translate('account.password.confirm')}\n                htmlFor=\"account-confirm-password\"\n                required\n                error={error}\n              >\n                <Input\n                  id=\"account-confirm-password\"\n                  type=\"password\"\n                  autoComplete=\"new-password\"\n                  value={confirm}\n                  onChange={(e) => setConfirm(e.target.value)}\n                  disabled={submitting}\n                />\n              </Field>\n              <Row>\n                <Button\n                  type=\"submit\"\n                  variant=\"outline\"\n                  disabled={submitting || !current || !next || !confirm}\n                >\n                  <KeyRound />\n                  {submitting\n                    ? translate('account.password.changing')\n                    : translate('account.password.change')}\n                </Button>\n              </Row>\n            </Stack>\n          </form>\n        </Stack>\n      </CardContent>\n    </Card>\n  )\n}\n"]}

package/dist/components/account/self-account-schema.d.ts

@@ -1,19 +1,10 @@
 import type { CollectionDef } from '@elytracms/core/cms-core';
+import type { RolePolicy } from '@elytracms/core/persistence';
 /**
- * The **account-settings** field lens (EC-240 H-tail) — the schema the portable
- * edit shell renders when a member opens their OWN record (via the user menu). It
- * diverges from the admin `usersCollectionDef` in exactly the way the ratified
- * scope dictates:
- *
- * - **name / avatar are EDITABLE** (not `form.readOnly`) — the person edits their
- *   own identity; the source's `save` routes these to `AuthAdapter.updateProfile`
- *   (auth-owned), never the members rail.
- * - **email is read-only** (email change is a separate, deferred seam).
- * - **role is read-only** — you never change your own role (the server integrity
- *   floor also guards it).
- *
- * Avatar is a plain URL text field for now; the media-picker convention is a
- * deferred polish item — this keeps the mechanism (name + avatar → updateProfile)
- * honest and complete without a half-built picker.
+ * EC-605 — the account lens for a project's role policy: the read-only `role` field
+ * shows the member's role by its DECLARED label (a project's own role would otherwise
+ * render as a value missing from the select). Built once per policy object.
  */
+export declare function selfAccountCollectionDefFor(policy: RolePolicy): CollectionDef;
+/** The account lens under the DEFAULT role policy (a project declaring no `roles`). */
 export declare const selfAccountCollectionDef: CollectionDef;

package/dist/components/account/self-account-schema.js

@@ -1,6 +1,6 @@
 import { collectionDefSchema } from '@elytracms/core/cms-core';
-import { roleOptions } from '@elytracms/core/persistence';
-import { msgLabel } from '@elytracms/studio/lib/i18n';
+import { defaultRolePolicy, roleOptions } from '@elytracms/core/persistence';
+import { msgLabel } from '../../lib/i18n/index.js';
 import { userTitleFallback } from '../users/users-schema.js';
 /**
  * The **account-settings** field lens (EC-240 H-tail) — the schema the portable
@@ -19,37 +19,55 @@ import { userTitleFallback } from '../users/users-schema.js';
  * deferred polish item — this keeps the mechanism (name + avatar → updateProfile)
  * honest and complete without a half-built picker.
  */
-export const selfAccountCollectionDef = collectionDefSchema.parse({
-    id: 'account',
-    kind: 'document',
-    // EC-396: name → email → id (shared with the users rail) so the account header,
-    // breadcrumb, and user menu never show the raw internal id when an email exists.
-    titleField: userTitleFallback,
-    form: {
-        label: msgLabel('account.rail.label'),
-        labelSingular: msgLabel('account.rail.labelSingular'),
-    },
-    fields: [
-        { name: 'name', type: 'text', form: { label: msgLabel('account.field.name.label') } },
-        {
-            name: 'avatar',
-            type: 'text',
-            form: {
-                label: msgLabel('account.field.avatar.label'),
-                description: msgLabel('account.field.avatar.hint'),
-            },
-        },
-        {
-            name: 'email',
-            type: 'text',
-            form: { label: msgLabel('account.field.email.label'), readOnly: true },
-        },
-        {
-            name: 'role',
-            type: 'select',
-            options: [...roleOptions()],
-            form: { label: msgLabel('account.field.role.label'), readOnly: true },
+const accountDefs = new WeakMap();
+/**
+ * EC-605 — the account lens for a project's role policy: the read-only `role` field
+ * shows the member's role by its DECLARED label (a project's own role would otherwise
+ * render as a value missing from the select). Built once per policy object.
+ */
+export function selfAccountCollectionDefFor(policy) {
+    let def = accountDefs.get(policy);
+    if (!def) {
+        def = buildSelfAccountCollectionDef(roleOptions(policy));
+        accountDefs.set(policy, def);
+    }
+    return def;
+}
+function buildSelfAccountCollectionDef(options) {
+    return collectionDefSchema.parse({
+        id: 'account',
+        kind: 'document',
+        // EC-396: name → email → id (shared with the users rail) so the account header,
+        // breadcrumb, and user menu never show the raw internal id when an email exists.
+        titleField: userTitleFallback,
+        form: {
+            label: msgLabel('account.rail.label'),
+            labelSingular: msgLabel('account.rail.labelSingular'),
         },
-    ],
-});
+        fields: [
+            { name: 'name', type: 'text', form: { label: msgLabel('account.field.name.label') } },
+            {
+                name: 'avatar',
+                type: 'text',
+                form: {
+                    label: msgLabel('account.field.avatar.label'),
+                    description: msgLabel('account.field.avatar.hint'),
+                },
+            },
+            {
+                name: 'email',
+                type: 'text',
+                form: { label: msgLabel('account.field.email.label'), readOnly: true },
+            },
+            {
+                name: 'role',
+                type: 'select',
+                options: [...options],
+                form: { label: msgLabel('account.field.role.label'), readOnly: true },
+            },
+        ],
+    });
+}
+/** The account lens under the DEFAULT role policy (a project declaring no `roles`). */
+export const selfAccountCollectionDef = selfAccountCollectionDefFor(defaultRolePolicy);
 //# sourceMappingURL=self-account-schema.js.map

package/dist/components/account/self-account-schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"self-account-schema.js","sourceRoot":"","sources":["../../../src/components/account/self-account-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAE9D,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAA;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAEzD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAkB,mBAAmB,CAAC,KAAK,CAAC;IAC/E,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,UAAU;IAChB,gFAAgF;IAChF,iFAAiF;IACjF,UAAU,EAAE,iBAAiB;IAC7B,IAAI,EAAE;QACJ,KAAK,EAAE,QAAQ,CAAC,oBAAoB,CAAC;QACrC,aAAa,EAAE,QAAQ,CAAC,4BAA4B,CAAC;KACtD;IACD,MAAM,EAAE;QACN,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,0BAA0B,CAAC,EAAE,EAAE;QACrF;YACE,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE;gBACJ,KAAK,EAAE,QAAQ,CAAC,4BAA4B,CAAC;gBAC7C,WAAW,EAAE,QAAQ,CAAC,2BAA2B,CAAC;aACnD;SACF;QACD;YACE,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,2BAA2B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;SACvE;QACD;YACE,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC;YAC3B,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,0BAA0B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;SACtE;KACF;CACF,CAAC,CAAA","sourcesContent":["import { collectionDefSchema } from '@elytracms/core/cms-core'\nimport type { CollectionDef } from '@elytracms/core/cms-core'\nimport { roleOptions } from '@elytracms/core/persistence'\nimport { msgLabel } from '@elytracms/studio/lib/i18n'\nimport { userTitleFallback } from '../users/users-schema'\n\n/**\n * The **account-settings** field lens (EC-240 H-tail) — the schema the portable\n * edit shell renders when a member opens their OWN record (via the user menu). It\n * diverges from the admin `usersCollectionDef` in exactly the way the ratified\n * scope dictates:\n *\n * - **name / avatar are EDITABLE** (not `form.readOnly`) — the person edits their\n *   own identity; the source's `save` routes these to `AuthAdapter.updateProfile`\n *   (auth-owned), never the members rail.\n * - **email is read-only** (email change is a separate, deferred seam).\n * - **role is read-only** — you never change your own role (the server integrity\n *   floor also guards it).\n *\n * Avatar is a plain URL text field for now; the media-picker convention is a\n * deferred polish item — this keeps the mechanism (name + avatar → updateProfile)\n * honest and complete without a half-built picker.\n */\nexport const selfAccountCollectionDef: CollectionDef = collectionDefSchema.parse({\n  id: 'account',\n  kind: 'document',\n  // EC-396: name → email → id (shared with the users rail) so the account header,\n  // breadcrumb, and user menu never show the raw internal id when an email exists.\n  titleField: userTitleFallback,\n  form: {\n    label: msgLabel('account.rail.label'),\n    labelSingular: msgLabel('account.rail.labelSingular'),\n  },\n  fields: [\n    { name: 'name', type: 'text', form: { label: msgLabel('account.field.name.label') } },\n    {\n      name: 'avatar',\n      type: 'text',\n      form: {\n        label: msgLabel('account.field.avatar.label'),\n        description: msgLabel('account.field.avatar.hint'),\n      },\n    },\n    {\n      name: 'email',\n      type: 'text',\n      form: { label: msgLabel('account.field.email.label'), readOnly: true },\n    },\n    {\n      name: 'role',\n      type: 'select',\n      options: [...roleOptions()],\n      form: { label: msgLabel('account.field.role.label'), readOnly: true },\n    },\n  ],\n})\n"]}
+{"version":3,"file":"self-account-schema.js","sourceRoot":"","sources":["../../../src/components/account/self-account-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAE9D,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AAE5E,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAEzD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,GAAG,IAAI,OAAO,EAA6B,CAAA;AAE5D;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAAkB;IAC5D,IAAI,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACjC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,GAAG,6BAA6B,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA;QACxD,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC9B,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,6BAA6B,CAAC,OAA2C;IAChF,OAAO,mBAAmB,CAAC,KAAK,CAAC;QAC/B,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,UAAU;QAChB,gFAAgF;QAChF,iFAAiF;QACjF,UAAU,EAAE,iBAAiB;QAC7B,IAAI,EAAE;YACJ,KAAK,EAAE,QAAQ,CAAC,oBAAoB,CAAC;YACrC,aAAa,EAAE,QAAQ,CAAC,4BAA4B,CAAC;SACtD;QACD,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,0BAA0B,CAAC,EAAE,EAAE;YACrF;gBACE,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE;oBACJ,KAAK,EAAE,QAAQ,CAAC,4BAA4B,CAAC;oBAC7C,WAAW,EAAE,QAAQ,CAAC,2BAA2B,CAAC;iBACnD;aACF;YACD;gBACE,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,2BAA2B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;aACvE;YACD;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;gBACrB,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,0BAA0B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;aACtE;SACF;KACF,CAAC,CAAA;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,MAAM,wBAAwB,GAAkB,2BAA2B,CAAC,iBAAiB,CAAC,CAAA","sourcesContent":["import { collectionDefSchema } from '@elytracms/core/cms-core'\nimport type { CollectionDef } from '@elytracms/core/cms-core'\nimport { defaultRolePolicy, roleOptions } from '@elytracms/core/persistence'\nimport type { RolePolicy } from '@elytracms/core/persistence'\nimport { msgLabel } from '../../lib/i18n'\nimport { userTitleFallback } from '../users/users-schema'\n\n/**\n * The **account-settings** field lens (EC-240 H-tail) — the schema the portable\n * edit shell renders when a member opens their OWN record (via the user menu). It\n * diverges from the admin `usersCollectionDef` in exactly the way the ratified\n * scope dictates:\n *\n * - **name / avatar are EDITABLE** (not `form.readOnly`) — the person edits their\n *   own identity; the source's `save` routes these to `AuthAdapter.updateProfile`\n *   (auth-owned), never the members rail.\n * - **email is read-only** (email change is a separate, deferred seam).\n * - **role is read-only** — you never change your own role (the server integrity\n *   floor also guards it).\n *\n * Avatar is a plain URL text field for now; the media-picker convention is a\n * deferred polish item — this keeps the mechanism (name + avatar → updateProfile)\n * honest and complete without a half-built picker.\n */\nconst accountDefs = new WeakMap<RolePolicy, CollectionDef>()\n\n/**\n * EC-605 — the account lens for a project's role policy: the read-only `role` field\n * shows the member's role by its DECLARED label (a project's own role would otherwise\n * render as a value missing from the select). Built once per policy object.\n */\nexport function selfAccountCollectionDefFor(policy: RolePolicy): CollectionDef {\n  let def = accountDefs.get(policy)\n  if (!def) {\n    def = buildSelfAccountCollectionDef(roleOptions(policy))\n    accountDefs.set(policy, def)\n  }\n  return def\n}\n\nfunction buildSelfAccountCollectionDef(options: { value: string; label: string }[]): CollectionDef {\n  return collectionDefSchema.parse({\n    id: 'account',\n    kind: 'document',\n    // EC-396: name → email → id (shared with the users rail) so the account header,\n    // breadcrumb, and user menu never show the raw internal id when an email exists.\n    titleField: userTitleFallback,\n    form: {\n      label: msgLabel('account.rail.label'),\n      labelSingular: msgLabel('account.rail.labelSingular'),\n    },\n    fields: [\n      { name: 'name', type: 'text', form: { label: msgLabel('account.field.name.label') } },\n      {\n        name: 'avatar',\n        type: 'text',\n        form: {\n          label: msgLabel('account.field.avatar.label'),\n          description: msgLabel('account.field.avatar.hint'),\n        },\n      },\n      {\n        name: 'email',\n        type: 'text',\n        form: { label: msgLabel('account.field.email.label'), readOnly: true },\n      },\n      {\n        name: 'role',\n        type: 'select',\n        options: [...options],\n        form: { label: msgLabel('account.field.role.label'), readOnly: true },\n      },\n    ],\n  })\n}\n\n/** The account lens under the DEFAULT role policy (a project declaring no `roles`). */\nexport const selfAccountCollectionDef: CollectionDef = selfAccountCollectionDefFor(defaultRolePolicy)\n"]}

package/dist/components/account/self-account-view-source.d.ts

@@ -1,6 +1,6 @@
 import type { CmsDocument } from '@elytracms/core/cms-core';
 import type { UserRecord } from '@elytracms/core/persistence';
-import type { CollectionViewCapabilities, CollectionViewSource } from '@elytracms/studio/lib/collection-view/collection-view-source';
+import type { CollectionViewCapabilities, CollectionViewSource } from '../../lib/collection-view/collection-view-source.js';
 /**
  * The capability profile of the account surface (EC-240 H-tail): a single self
  * record edited in place — no publish/versions/create/remove/import. The record

package/dist/components/account/self-account-view-source.js

@@ -1,9 +1,10 @@
 import { useCallback } from 'react';
 import { studioPath } from '@elytracms/studio/router';
-import { translate } from '@elytracms/studio/lib/i18n';
-import { updateProfileErrorMessageKey } from '@elytracms/studio/lib/auth-errors';
+import { translate } from '../../lib/i18n/index.js';
+import { updateProfileErrorMessageKey } from '../../lib/auth-errors.js';
 import { useAuth } from '../auth-context.js';
-import { selfAccountCollectionDef } from './self-account-schema.js';
+import { selfAccountCollectionDef, selfAccountCollectionDefFor } from './self-account-schema.js';
+import { projectRolePolicyFor } from '../../lib/operations/project-runtime-config.js';
 import { normalizeOkResult, useRailViewSource } from '../rail-view-source.js';
 import { parseLocaleConfig } from '@elytracms/core/cms-core';
 /** The account surface is not localized — one implicit locale keeps the lens honest. */
@@ -98,7 +99,8 @@ export function useSelfAccountViewSource(input) {
     }, []);
     return useRailViewSource({
         projectId,
-        schema: selfAccountCollectionDef,
+        // EC-605: the role is shown by THIS project's declared label (stable per policy).
+        schema: selfAccountCollectionDefFor(projectRolePolicyFor(projectId)),
         capabilities: ACCOUNT_CAPABILITIES,
         localeConfig: ACCOUNT_LOCALE_CONFIG,
         documents,

package/dist/components/account/self-account-view-source.js.map

@@ -1 +1 @@
-{"version":3,"file":"self-account-view-source.js","sourceRoot":"","sources":["../../../src/components/account/self-account-view-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAA;AAGnC,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAMrD,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AACtD,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAA;AAChF,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAChE,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAE5D,wFAAwF;AACxF,MAAM,cAAc,GAAW,IAAI,CAAA;AACnC,MAAM,qBAAqB,GAAiB,iBAAiB,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CAAA;AAErH;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B;IAC9D,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,MAAM,EAAE,KAAK;IACb,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,KAAK;IACd,SAAS,EAAE,KAAK;IAChB,YAAY,EAAE,KAAK;CACpB,CAAA;AAED,qFAAqF;AACrF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;AAErD,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,OAAO;QACL,UAAU,EAAE,wBAAwB,CAAC,EAAE;QACvC,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,MAAM,EAAE;YACN,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,QAAQ;SAClC;KACF,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAgB,EAChB,QAAoB;IAEpB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAA;IAC/B,MAAM,IAAI,GAAuC,EAAE,CAAA;IACnD,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IACnE,MAAM,UAAU,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;IACzE,IAAI,QAAQ,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;QAAE,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAA;IAC5D,IAAI,UAAU,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;QAAE,IAAI,CAAC,MAAM,GAAG,UAAU,CAAA;IACpE,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAIxC;IACC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAA;IAC1C,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;IAEtB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;IACnE,MAAM,GAAG,GAAG,WAAW,CACrB,CAAC,GAAgB,EAA2B,EAAE,CAC5C,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EACvD,CAAC,IAAI,CAAC,CACP,CAAA;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;IAE7E,MAAM,IAAI,GAAG,WAAW,CACtB,KAAK,EAAE,GAAgB,EAA0D,EAAE;QACjF,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAC3C,sEAAsE;QACtE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;QAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;QAC7C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,kEAAkE;YAClE,mEAAmE;YACnE,uEAAuE;YACvE,MAAM,QAAQ,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAA;YACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAA;QAChF,CAAC;QACD,6EAA6E;QAC7E,MAAM,OAAO,EAAE,CAAA;QACf,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACrB,CAAC,EACD,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CACtB,CAAA;IAED,MAAM,QAAQ,GAAG,WAAW,CAC1B,KAAK,IAA2B,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EACjD,EAAE,CACH,CAAA;IACD,MAAM,YAAY,GAAG,WAAW,CAAC,GAAyB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;IACpE,MAAM,iBAAiB,GAAG,WAAW,CAAC,GAAgB,EAAE;QACtD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;IACtD,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,OAAO,iBAAiB,CAAC;QACvB,SAAS;QACT,MAAM,EAAE,wBAAwB;QAChC,YAAY,EAAE,oBAAoB;QAClC,YAAY,EAAE,qBAAqB;QACnC,SAAS;QACT,GAAG;QACH,OAAO;QACP,iFAAiF;QACjF,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,IAAI,KAAK,CAAC;QACjG,UAAU,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE;QAC5B,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,iBAAiB;QACzB,IAAI;QACJ,MAAM,EAAE,QAAQ;QAChB,mBAAmB,EAAE,iBAAiB;QACtC,qBAAqB,EAAE,GAA0B,EAAE,CAAC,IAAI;KACzD,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { useCallback } from 'react'\nimport type { CmsDocument, CmsValidationIssue, DocumentRef, Locale, LocaleConfig } from '@elytracms/core/cms-core'\nimport type { UserRecord } from '@elytracms/core/persistence'\nimport { studioPath } from '@elytracms/studio/router'\nimport type {\n  CollectionViewCapabilities,\n  CollectionViewSource,\n} from '@elytracms/studio/lib/collection-view/collection-view-source'\nimport type { OperationError } from '@elytracms/core/operations'\nimport { translate } from '@elytracms/studio/lib/i18n'\nimport { updateProfileErrorMessageKey } from '@elytracms/studio/lib/auth-errors'\nimport { useAuth } from '../auth-context'\nimport { selfAccountCollectionDef } from './self-account-schema'\nimport { normalizeOkResult, useRailViewSource } from '../rail-view-source'\nimport { parseLocaleConfig } from '@elytracms/core/cms-core'\n\n/** The account surface is not localized — one implicit locale keeps the lens honest. */\nconst ACCOUNT_LOCALE: Locale = 'en'\nconst ACCOUNT_LOCALE_CONFIG: LocaleConfig = parseLocaleConfig({ default: ACCOUNT_LOCALE, locales: [ACCOUNT_LOCALE] })\n\n/**\n * The capability profile of the account surface (EC-240 H-tail): a single self\n * record edited in place — no publish/versions/create/remove/import. The record\n * is the caller's own; there is nothing to delete or list.\n */\nexport const ACCOUNT_CAPABILITIES: CollectionViewCapabilities = {\n  publish: false,\n  versions: false,\n  locales: false,\n  inlineEdit: false,\n  create: false,\n  duplicate: false,\n  remove: false,\n  bulk: false,\n  liveUrl: false,\n  hierarchy: false,\n  importExport: false,\n}\n\n/** Everything in `values` that is NOT an editable identity field is display-only. */\nconst EDITABLE_IDENTITY = new Set(['name', 'avatar'])\n\n/** Project the self record into the account lens's `values`. */\nexport function selfToDocument(record: UserRecord): CmsDocument {\n  return {\n    collection: selfAccountCollectionDef.id,\n    id: record.id,\n    values: {\n      name: record.name ?? '',\n      avatar: record.avatar ?? '',\n      email: record.email,\n      role: record.roles[0] ?? 'viewer',\n    },\n  }\n}\n\n/**\n * Compute the identity diff (name / avatar) an edited account document carries —\n * the exact seam handed to `AuthAdapter.updateProfile`. Pure so the split-write is\n * unit-testable: only the fields the person changed are sent (an empty diff is a\n * no-op the caller can short-circuit). Never carries `email`/`role` — those are\n * read-only on this surface and are not auth-adapter-writable here.\n */\nexport function accountIdentityDiff(\n  doc: CmsDocument,\n  previous: UserRecord,\n): { name?: string; avatar?: string } {\n  const values = doc.values ?? {}\n  const diff: { name?: string; avatar?: string } = {}\n  const nextName = typeof values.name === 'string' ? values.name : ''\n  const nextAvatar = typeof values.avatar === 'string' ? values.avatar : ''\n  if (nextName !== (previous.name ?? '')) diff.name = nextName\n  if (nextAvatar !== (previous.avatar ?? '')) diff.avatar = nextAvatar\n  return diff\n}\n\n/**\n * Assemble a {@link CollectionViewSource} for the **account-settings** surface\n * (EC-240 H-tail). Reuses the portable edit shell over the caller's OWN record —\n * name/avatar editable, email/role read-only (per the schema). The `save` routes\n * the identity diff to `AuthAdapter.updateProfile` (auth-owned) — NOT the\n * members-rail `users.save` — then refreshes the loaded record. `EDITABLE_IDENTITY`\n * marks which fields the save may write; everything else is display-only.\n */\nexport function useSelfAccountViewSource(input: {\n  projectId: string\n  self: UserRecord\n  refresh: () => Promise<void>\n}): CollectionViewSource {\n  const { projectId, self, refresh } = input\n  const auth = useAuth()\n\n  const documents = useCallback(() => [selfToDocument(self)], [self])\n  const get = useCallback(\n    (ref: DocumentRef): CmsDocument | undefined =>\n      ref.id === self.id ? selfToDocument(self) : undefined,\n    [self],\n  )\n  const titleOf = useCallback(() => self.name || self.email || self.id, [self])\n\n  const save = useCallback(\n    async (doc: CmsDocument): Promise<{ ok: true } | { ok: false; message: string }> => {\n      const diff = accountIdentityDiff(doc, self)\n      // No identity change (e.g. a read-only-only edit) → nothing to write.\n      if (diff.name === undefined && diff.avatar === undefined) return { ok: true }\n      const result = await auth.updateProfile(diff)\n      if (!result.ok) {\n        // EC-416: engine-classified failures localize through the message\n        // catalog; an unrecognized shape renders the adapter's raw English\n        // message — honest, never a stale mapping (the EC-397/EC-412 pattern).\n        const errorKey = updateProfileErrorMessageKey(result)\n        return { ok: false, message: errorKey ? translate(errorKey) : result.message }\n      }\n      // Reflect the new identity in the loaded record (session already refreshed).\n      await refresh()\n      return { ok: true }\n    },\n    [auth, self, refresh],\n  )\n\n  const noRemove = useCallback(\n    async (): Promise<{ ok: true }> => ({ ok: true }),\n    [],\n  )\n  const noValidation = useCallback((): CmsValidationIssue[] => [], [])\n  const createUnsupported = useCallback((): DocumentRef => {\n    throw new Error('the account surface has no create')\n  }, [])\n\n  return useRailViewSource({\n    projectId,\n    schema: selfAccountCollectionDef,\n    capabilities: ACCOUNT_CAPABILITIES,\n    localeConfig: ACCOUNT_LOCALE_CONFIG,\n    documents,\n    get,\n    titleOf,\n    // Editable-identity fields drive writability; the rest are read-only per schema.\n    isFieldReadOnly: (field) => !EDITABLE_IDENTITY.has(field.name) || (field.form?.readOnly ?? false),\n    detailPath: (id: string) => studioPath.user(id),\n    listPath: studioPath.users(),\n    validate: noValidation,\n    create: createUnsupported,\n    save,\n    remove: noRemove,\n    normalizeSaveResult: normalizeOkResult,\n    normalizeRemoveResult: (): OperationError | null => null,\n  })\n}\n"]}
+{"version":3,"file":"self-account-view-source.js","sourceRoot":"","sources":["../../../src/components/account/self-account-view-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAA;AAGnC,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAMrD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAA;AACpE,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AACzC,OAAO,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAA;AAC7F,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAA;AAClF,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAE5D,wFAAwF;AACxF,MAAM,cAAc,GAAW,IAAI,CAAA;AACnC,MAAM,qBAAqB,GAAiB,iBAAiB,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CAAA;AAErH;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B;IAC9D,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,MAAM,EAAE,KAAK;IACb,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,KAAK;IACd,SAAS,EAAE,KAAK;IAChB,YAAY,EAAE,KAAK;CACpB,CAAA;AAED,qFAAqF;AACrF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;AAErD,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,OAAO;QACL,UAAU,EAAE,wBAAwB,CAAC,EAAE;QACvC,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,MAAM,EAAE;YACN,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,QAAQ;SAClC;KACF,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAgB,EAChB,QAAoB;IAEpB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAA;IAC/B,MAAM,IAAI,GAAuC,EAAE,CAAA;IACnD,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IACnE,MAAM,UAAU,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;IACzE,IAAI,QAAQ,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;QAAE,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAA;IAC5D,IAAI,UAAU,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;QAAE,IAAI,CAAC,MAAM,GAAG,UAAU,CAAA;IACpE,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAIxC;IACC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAA;IAC1C,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;IAEtB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;IACnE,MAAM,GAAG,GAAG,WAAW,CACrB,CAAC,GAAgB,EAA2B,EAAE,CAC5C,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EACvD,CAAC,IAAI,CAAC,CACP,CAAA;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;IAE7E,MAAM,IAAI,GAAG,WAAW,CACtB,KAAK,EAAE,GAAgB,EAA0D,EAAE;QACjF,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAC3C,sEAAsE;QACtE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;QAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;QAC7C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,kEAAkE;YAClE,mEAAmE;YACnE,uEAAuE;YACvE,MAAM,QAAQ,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAA;YACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAA;QAChF,CAAC;QACD,6EAA6E;QAC7E,MAAM,OAAO,EAAE,CAAA;QACf,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACrB,CAAC,EACD,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CACtB,CAAA;IAED,MAAM,QAAQ,GAAG,WAAW,CAC1B,KAAK,IAA2B,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EACjD,EAAE,CACH,CAAA;IACD,MAAM,YAAY,GAAG,WAAW,CAAC,GAAyB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;IACpE,MAAM,iBAAiB,GAAG,WAAW,CAAC,GAAgB,EAAE;QACtD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;IACtD,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,OAAO,iBAAiB,CAAC;QACvB,SAAS;QACT,kFAAkF;QAClF,MAAM,EAAE,2BAA2B,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACpE,YAAY,EAAE,oBAAoB;QAClC,YAAY,EAAE,qBAAqB;QACnC,SAAS;QACT,GAAG;QACH,OAAO;QACP,iFAAiF;QACjF,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,IAAI,KAAK,CAAC;QACjG,UAAU,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE;QAC5B,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,iBAAiB;QACzB,IAAI;QACJ,MAAM,EAAE,QAAQ;QAChB,mBAAmB,EAAE,iBAAiB;QACtC,qBAAqB,EAAE,GAA0B,EAAE,CAAC,IAAI;KACzD,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { useCallback } from 'react'\nimport type { CmsDocument, CmsValidationIssue, DocumentRef, Locale, LocaleConfig } from '@elytracms/core/cms-core'\nimport type { UserRecord } from '@elytracms/core/persistence'\nimport { studioPath } from '@elytracms/studio/router'\nimport type {\n  CollectionViewCapabilities,\n  CollectionViewSource,\n} from '../../lib/collection-view/collection-view-source'\nimport type { OperationError } from '@elytracms/core/operations'\nimport { translate } from '../../lib/i18n'\nimport { updateProfileErrorMessageKey } from '../../lib/auth-errors'\nimport { useAuth } from '../auth-context'\nimport { selfAccountCollectionDef, selfAccountCollectionDefFor } from './self-account-schema'\nimport { projectRolePolicyFor } from '../../lib/operations/project-runtime-config'\nimport { normalizeOkResult, useRailViewSource } from '../rail-view-source'\nimport { parseLocaleConfig } from '@elytracms/core/cms-core'\n\n/** The account surface is not localized — one implicit locale keeps the lens honest. */\nconst ACCOUNT_LOCALE: Locale = 'en'\nconst ACCOUNT_LOCALE_CONFIG: LocaleConfig = parseLocaleConfig({ default: ACCOUNT_LOCALE, locales: [ACCOUNT_LOCALE] })\n\n/**\n * The capability profile of the account surface (EC-240 H-tail): a single self\n * record edited in place — no publish/versions/create/remove/import. The record\n * is the caller's own; there is nothing to delete or list.\n */\nexport const ACCOUNT_CAPABILITIES: CollectionViewCapabilities = {\n  publish: false,\n  versions: false,\n  locales: false,\n  inlineEdit: false,\n  create: false,\n  duplicate: false,\n  remove: false,\n  bulk: false,\n  liveUrl: false,\n  hierarchy: false,\n  importExport: false,\n}\n\n/** Everything in `values` that is NOT an editable identity field is display-only. */\nconst EDITABLE_IDENTITY = new Set(['name', 'avatar'])\n\n/** Project the self record into the account lens's `values`. */\nexport function selfToDocument(record: UserRecord): CmsDocument {\n  return {\n    collection: selfAccountCollectionDef.id,\n    id: record.id,\n    values: {\n      name: record.name ?? '',\n      avatar: record.avatar ?? '',\n      email: record.email,\n      role: record.roles[0] ?? 'viewer',\n    },\n  }\n}\n\n/**\n * Compute the identity diff (name / avatar) an edited account document carries —\n * the exact seam handed to `AuthAdapter.updateProfile`. Pure so the split-write is\n * unit-testable: only the fields the person changed are sent (an empty diff is a\n * no-op the caller can short-circuit). Never carries `email`/`role` — those are\n * read-only on this surface and are not auth-adapter-writable here.\n */\nexport function accountIdentityDiff(\n  doc: CmsDocument,\n  previous: UserRecord,\n): { name?: string; avatar?: string } {\n  const values = doc.values ?? {}\n  const diff: { name?: string; avatar?: string } = {}\n  const nextName = typeof values.name === 'string' ? values.name : ''\n  const nextAvatar = typeof values.avatar === 'string' ? values.avatar : ''\n  if (nextName !== (previous.name ?? '')) diff.name = nextName\n  if (nextAvatar !== (previous.avatar ?? '')) diff.avatar = nextAvatar\n  return diff\n}\n\n/**\n * Assemble a {@link CollectionViewSource} for the **account-settings** surface\n * (EC-240 H-tail). Reuses the portable edit shell over the caller's OWN record —\n * name/avatar editable, email/role read-only (per the schema). The `save` routes\n * the identity diff to `AuthAdapter.updateProfile` (auth-owned) — NOT the\n * members-rail `users.save` — then refreshes the loaded record. `EDITABLE_IDENTITY`\n * marks which fields the save may write; everything else is display-only.\n */\nexport function useSelfAccountViewSource(input: {\n  projectId: string\n  self: UserRecord\n  refresh: () => Promise<void>\n}): CollectionViewSource {\n  const { projectId, self, refresh } = input\n  const auth = useAuth()\n\n  const documents = useCallback(() => [selfToDocument(self)], [self])\n  const get = useCallback(\n    (ref: DocumentRef): CmsDocument | undefined =>\n      ref.id === self.id ? selfToDocument(self) : undefined,\n    [self],\n  )\n  const titleOf = useCallback(() => self.name || self.email || self.id, [self])\n\n  const save = useCallback(\n    async (doc: CmsDocument): Promise<{ ok: true } | { ok: false; message: string }> => {\n      const diff = accountIdentityDiff(doc, self)\n      // No identity change (e.g. a read-only-only edit) → nothing to write.\n      if (diff.name === undefined && diff.avatar === undefined) return { ok: true }\n      const result = await auth.updateProfile(diff)\n      if (!result.ok) {\n        // EC-416: engine-classified failures localize through the message\n        // catalog; an unrecognized shape renders the adapter's raw English\n        // message — honest, never a stale mapping (the EC-397/EC-412 pattern).\n        const errorKey = updateProfileErrorMessageKey(result)\n        return { ok: false, message: errorKey ? translate(errorKey) : result.message }\n      }\n      // Reflect the new identity in the loaded record (session already refreshed).\n      await refresh()\n      return { ok: true }\n    },\n    [auth, self, refresh],\n  )\n\n  const noRemove = useCallback(\n    async (): Promise<{ ok: true }> => ({ ok: true }),\n    [],\n  )\n  const noValidation = useCallback((): CmsValidationIssue[] => [], [])\n  const createUnsupported = useCallback((): DocumentRef => {\n    throw new Error('the account surface has no create')\n  }, [])\n\n  return useRailViewSource({\n    projectId,\n    // EC-605: the role is shown by THIS project's declared label (stable per policy).\n    schema: selfAccountCollectionDefFor(projectRolePolicyFor(projectId)),\n    capabilities: ACCOUNT_CAPABILITIES,\n    localeConfig: ACCOUNT_LOCALE_CONFIG,\n    documents,\n    get,\n    titleOf,\n    // Editable-identity fields drive writability; the rest are read-only per schema.\n    isFieldReadOnly: (field) => !EDITABLE_IDENTITY.has(field.name) || (field.form?.readOnly ?? false),\n    detailPath: (id: string) => studioPath.user(id),\n    listPath: studioPath.users(),\n    validate: noValidation,\n    create: createUnsupported,\n    save,\n    remove: noRemove,\n    normalizeSaveResult: normalizeOkResult,\n    normalizeRemoveResult: (): OperationError | null => null,\n  })\n}\n"]}